@evolvingmachines/modal 0.0.51 → 0.0.52-project-sable.20260729.8632c49

package/dist/index.cjs

@@ -1,4 +1,4 @@
-'use strict';var modal=require('modal'),tarStream=require('tar-stream');var b={"evolve-all":"evolvingmachines/evolve-all"},h=new Set([".xlsx",".xls",".docx",".doc",".pptx",".ppt",".pdf",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".webp",".ico",".bmp",".mp3",".wav",".ogg",".flac",".aac",".mp4",".avi",".mov",".mkv",".webm",".woff",".woff2",".ttf",".otf",".eot",".exe",".dll",".so",".dylib",".sqlite",".db",".pickle",".pkl",".parquet"]);function y(c){let t=c.substring(c.lastIndexOf(".")).toLowerCase();return h.has(t)}var u=class{constructor(t){this.sandbox=t;}wrapAsUser(t,e,n){let r="";n&&Object.keys(n).length>0&&(r=Object.entries(n).filter(([,o])=>o!=null).map(([o,i])=>`export ${o}='${String(i).replace(/'/g,"'\\''")}'`).join("; ")+"; ");let s=e?`cd '${e.replace(/'/g,"'\\''")}' && ${r}${t}`:`${r}${t}`;return ["su","user","-c",`echo ${Buffer.from(s).toString("base64")} | base64 -d | bash`]}async run(t,e){let n=this.wrapAsUser(t,e?.cwd,e?.envs),r=await this.sandbox.exec(n,{timeoutMs:e?.timeoutMs}),{stdout:s,stderr:a}=await this.accumulateStreams(r,e?.onStdout,e?.onStderr);return {exitCode:await r.wait(),stdout:s,stderr:a}}async spawn(t,e){let n=this.wrapAsUser(t,e?.cwd,e?.envs),r=await this.sandbox.exec(n,{timeoutMs:e?.timeoutMs}),s="",a="",o=this.accumulateStreams(r,e?.onStdout?d=>{e.onStdout(d);}:void 0,e?.onStderr?d=>{e.onStderr(d);}:void 0).then(({stdout:d,stderr:m})=>{s=d,a=m;}).catch(()=>{});return {processId:`modal-${Date.now()}-${Math.random().toString(36).slice(2)}`,wait:async()=>(await o,{exitCode:await r.wait(),stdout:s,stderr:a}),kill:async()=>false}}async list(){let t=await this.sandbox.exec(["ps","-eo","pid,comm,args"],{timeoutMs:1e4});return await t.wait(),(await t.stdout.readText()).trim().split(`
-`).slice(1).map(r=>{let s=r.trim().split(/\s+/);return {processId:s[0],cmd:s[1]||"",args:s.slice(2),envs:{}}})}async connect(t,e){throw new Error("Modal does not support connecting to existing processes")}async sendStdin(t,e){throw new Error("Modal does not support sendStdin by process ID")}async kill(t){return await(await this.sandbox.exec(["kill","-9",t],{timeoutMs:1e4})).wait()===0}async accumulateStreams(t,e,n){let r="",s="",a=[];return a.push((async()=>{try{for await(let o of t.stdout){let i=typeof o=="string"?o:new TextDecoder().decode(o);r+=i,e?.(i);}}catch{}})()),a.push((async()=>{try{for await(let o of t.stderr){let i=typeof o=="string"?o:new TextDecoder().decode(o);s+=i,n?.(i);}}catch{}})()),await Promise.all(a),{stdout:r,stderr:s}}},g=class{constructor(t){this.sandbox=t;}async read(t){if(y(t)){let r=await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"}),s=await r.wait();if(s!==0){let a=await r.stderr.readText();throw new Error(`Failed to read file ${t}: ${a||`exit code ${s}`}`)}return await r.stdout.readBytes()}let e=await this.sandbox.exec(["cat",t],{timeoutMs:3e5}),n=await e.wait();if(n!==0){let r=await e.stderr.readText();throw new Error(`Failed to read file ${t}: ${r||`exit code ${n}`}`)}return await e.stdout.readText()}async write(t,e){let n=this.toBuffer(e),r=t.substring(0,t.lastIndexOf("/"));r&&await this.makeDir(r);let s=t.replace(/'/g,"'\\''"),a=await this.sandbox.exec(["bash","-c",`cat > '${s}'`],{mode:"binary"});await a.stdin.writeBytes(new Uint8Array(n)),await a.stdin.getWriter().close(),await a.wait(),await(await this.sandbox.exec(["chown","user:user",t],{timeoutMs:1e4})).wait();}async writeBatch(t){let e=tarStream.pack(),n=[],r=new Set;for(let i of t){let d=this.toBuffer(i.data),m=i.path.startsWith("/")?i.path.slice(1):i.path;e.entry({name:m},d);let p=i.path.substring(0,i.path.lastIndexOf("/"));p&&r.add(p);}e.finalize();for await(let i of e)n.push(Buffer.from(i));let s=Buffer.concat(n),a=await this.sandbox.exec(["tar","-xf","-","-C","/"],{mode:"binary"});if(await a.stdin.writeBytes(new Uint8Array(s)),await a.stdin.getWriter().close(),await a.wait(),r.size>0){let i=Array.from(r),d=new Set(i.map(m=>m.split("/").slice(0,4).join("/")));for(let m of d)await(await this.sandbox.exec(["chown","-R","user:user",m],{timeoutMs:3e4})).wait();}}async makeDir(t){await(await this.sandbox.exec(["mkdir","-p",t],{timeoutMs:1e4})).wait(),await(await this.sandbox.exec(["chown","-R","user:user",t],{timeoutMs:1e4})).wait();}async exists(t){return await(await this.sandbox.exec(["test","-e",t],{timeoutMs:1e4})).wait()===0}async list(t){let e=t.replace(/'/g,"'\\''"),n=await this.sandbox.exec(["bash","-c",`ls -la '${e}' | tail -n +2`],{timeoutMs:3e4});await n.wait();let r=await n.stdout.readText(),s=[];for(let a of r.trim().split(`
-`)){if(!a)continue;let o=a.split(/\s+/);if(o.length<9)continue;let i=o[0],d=o.slice(8).join(" ");d==="."||d===".."||s.push({name:d,path:t.endsWith("/")?`${t}${d}`:`${t}/${d}`,type:i.startsWith("d")?"dir":"file"});}return s}async remove(t){await(await this.sandbox.exec(["rm","-rf",t],{timeoutMs:3e4})).wait();}async rename(t,e){await(await this.sandbox.exec(["mv",t,e],{timeoutMs:3e4})).wait();}async readStream(t){return (await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"})).stdout}async writeStream(t,e){let n=t.substring(0,t.lastIndexOf("/"));n&&await this.makeDir(n);let r=t.replace(/'/g,"'\\''"),s=await this.sandbox.exec(["bash","-c",`cat > '${r}'`],{mode:"binary"}),a=e.getReader();try{for(;;){let{done:i,value:d}=await a.read();if(i)break;await s.stdin.writeBytes(d);}}finally{a.releaseLock();}await s.stdin.getWriter().close(),await s.wait();}async uploadUrl(t,e){throw new Error("Modal does not support pre-signed upload URLs")}async downloadUrl(t,e){throw new Error("Modal does not support pre-signed download URLs")}async watchDir(t,e,n){throw new Error("Modal does not support watchDir")}toBuffer(t){if(typeof t=="string")return Buffer.from(t,"utf-8");if(t instanceof Buffer)return t;if(t instanceof ArrayBuffer||t instanceof Uint8Array)return Buffer.from(t);throw new Error(`Unsupported data type: ${typeof t}`)}},l=class{constructor(t,e){this.sandbox=t;this.commands=new u(t),this.files=new g(t),this.image=e,this.startTime=new Date;}commands;files;image;startTime;get sandboxId(){return this.sandbox.sandboxId}async getHost(t){let n=(await this.sandbox.tunnels())[t];if(!n)throw new Error(`No tunnel found for port ${t}`);return n.url}async isRunning(){try{return await(await this.sandbox.exec(["echo","ping"],{timeoutMs:5e3})).wait(),!0}catch{return  false}}async getInfo(){return {sandboxId:this.sandbox.sandboxId,image:this.image,metadata:{},startedAt:this.startTime.toISOString()}}async kill(){try{await this.sandbox.terminate();}catch{await new Promise(t=>setTimeout(t,500)),await this.sandbox.terminate();}}async pause(){throw new Error("Modal does not support pause. Use kill() instead.")}},w=class{providerType="modal";name="Modal";client;appName;defaultTimeoutMs;imageName;_app;constructor(t){!t.endpoint&&process.env.MODAL_SERVER_URL?.startsWith("unix:")?process.env.MODAL_SERVER_URL="https://api.modal.com:443":t.endpoint&&(process.env.MODAL_SERVER_URL=t.endpoint),this.client=new modal.ModalClient({tokenId:t.tokenId,tokenSecret:t.tokenSecret}),this.appName=t.appName??"evolve-sandbox",this.defaultTimeoutMs=t.defaultTimeoutMs??36e5,this.imageName=t.imageName??"evolve-all";}async getApp(){return this._app||(this._app=await this.client.apps.fromName(this.appName,{createIfMissing:true})),this._app}async create(t){let e=await this.getApp(),n=t.timeoutMs??this.defaultTimeoutMs,r=t.image||this.imageName,s=b[r]??r,o=await this.client.images.fromRegistry(s).build(e),i=t.envs?Object.fromEntries(Object.entries(t.envs).filter(([,p])=>p!=null)):void 0,d=i&&Object.keys(i).length>0?i:void 0,m=await this.client.sandboxes.create(e,o,{cpu:4,memoryMiB:4096,timeoutMs:n,workdir:t.workingDirectory,env:d});return t.workingDirectory&&await(await m.exec(["chown","-R","user:user",t.workingDirectory],{timeoutMs:3e4})).wait(),new l(m,s)}async connect(t,e){let n=await this.client.sandboxes.fromId(t);return new l(n,"unknown")}async list(t){let e=[],n=t?.limit??100;try{for await(let r of this.client.sandboxes.list())if(e.push({sandboxId:r.sandboxId,image:"unknown",metadata:{},startedAt:new Date().toISOString()}),e.length>=n)break}catch{}return e}};function k(c={}){let t=c.tokenId??process.env.MODAL_TOKEN_ID,e=c.tokenSecret??process.env.MODAL_TOKEN_SECRET;if(!t||!e)throw new Error("Modal credentials required. Set MODAL_TOKEN_ID and MODAL_TOKEN_SECRET environment variables, or pass tokenId/tokenSecret in config. Get your token at https://modal.com/settings/tokens");return new w({...c,tokenId:t,tokenSecret:e})}
-exports.ModalProvider=w;exports.createModalProvider=k;
+'use strict';var modal=require('modal'),tarStream=require('tar-stream');var H={"evolve-all":"evolvingmachines/evolve-all"},E=1440*60*1e3,A=8*1024*1024,k="user",R="evolve.image",_="evolve.startedAt",j=new Set([".xlsx",".xls",".docx",".doc",".pptx",".ppt",".pdf",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".webp",".ico",".bmp",".mp3",".wav",".ogg",".flac",".aac",".mp4",".avi",".mov",".mkv",".webm",".woff",".woff2",".ttf",".otf",".eot",".exe",".dll",".so",".dylib",".sqlite",".db",".pickle",".pkl",".parquet"]);function q(n){let t=n.substring(n.lastIndexOf(".")).toLowerCase();return j.has(t)}var x=class extends Error{requestedTimeoutMs;constructor(t){let e=(t/36e5).toFixed(1);super(`Modal sandboxes have a hard 24h lifetime cap; requested timeout was ${e}h. For sessions longer than 24h, persist progress with Evolve checkpoints and resume in a fresh sandbox instead of extending the timeout.`),this.name="ModalSandboxLifetimeError",this.requestedTimeoutMs=t;}};function C(n){if(n>E)throw new x(n)}var p=class extends Error{requestedIdleTimeoutMs;constructor(t,e){super(`Modal idleTimeoutMs of ${t}ms is invalid: ${e}`),this.name="ModalIdleTimeoutError",this.requestedIdleTimeoutMs=t;}};function O(n){if(n===void 0)return {};if(!Number.isFinite(n)||n<=0)throw new p(n,"it must be a positive number of milliseconds");if(n>E)throw new p(n,"it exceeds Modal's 24h lifetime cap, so the sandbox would always die of the lifetime first");return {idleTimeoutMs:n}}function b(n,t,e,r){let s="";r&&Object.keys(r).length>0&&(s=Object.entries(r).filter(([,d])=>d!=null).map(([d,a])=>`export ${d}='${String(a).replace(/'/g,"'\\''")}'`).join("; ")+"; ");let i=e?`cd '${e.replace(/'/g,"'\\''")}' && ${s}${n}`:`${s}${n}`;if(t==="root")return ["bash","-c",i];let o=Buffer.from(i).toString("base64");return ["su",t,"-c",`echo ${o} | base64 -d | bash`]}var S=class extends Error{constructor(t){super(t),this.name="ModalResourcesError";}},z=4,G=4096;function N(n){if(n?.disk!==void 0)throw new S(`Modal's JS SDK has no create-time disk-size parameter, so a ${n.disk} GiB disk request cannot be enforced. Drop \`resources.disk\` (containers get Modal's default disk quota) or run on a provider that sizes disk.`);return {cpu:n?.cpu??z,memoryMiB:n?.memory!==void 0?Math.ceil(n.memory*1024):G}}var u=class extends Error{reason;destination;constructor(t,e,r){super(e),this.name="ModalNetworkPolicyError",this.reason=t,this.destination=r;}};function D(n){let t=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})(?:\/(\d{1,3}))?$/.exec(n);return !(!t||[t[1],t[2],t[3],t[4]].some(e=>Number(e)>255)||t[5]!==void 0&&Number(t[5])>32)}function K(n){return /^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(n)&&!D(n)}function X(n){return n.startsWith("[")?true:(n.match(/:/g)?.length??0)>=2}function Y(n){return /^[^:]+:\d+$/.test(n)}function T(n){if(!n||n.outbound==="open"){if(n?.allowedDestinations?.length)throw new Error("network.allowedDestinations is only valid when outbound is blocked");return {}}let t=n.allowedDestinations??[];if(t.length===0)return {blockNetwork:true};let e=[],r=[];for(let s of t)if(D(s))e.push(s.includes("/")?s:`${s}/32`);else {if(K(s))throw new u("invalid-ipv4",`"${s}" is not a valid IPv4 address or CIDR (octets must be 0-255, prefix 0-32). Fix the address or list a hostname instead.`,s);if(X(s))e.push(s.includes("/")?s:`${s}/128`);else {if(Y(s))throw new u("port-unsupported",`Modal's network allowlist filters hosts and IPs only and cannot match a port; drop the ":<port>" from "${s}" and list just the host or IP.`,s);r.push(s);}}return {outboundCidrAllowlist:e,outboundDomainAllowlist:r}}function $(n){let t=n.split("/")[0];return /^\d{12}\.dkr\.ecr\.[a-z0-9-]+\.amazonaws\.com$/.test(t)?"aws-ecr":t==="gcr.io"||t.endsWith(".gcr.io")||t.endsWith("-docker.pkg.dev")?"gcp-artifact-registry":"registry"}function I(n,t,e){let{[R]:r,[_]:s,...i}=t;return {sandboxId:n,image:r??e??"",metadata:i,startedAt:s??""}}var M=1e4,y=class{constructor(t,e){this.sandbox=t;this.user=e;}async run(t,e){let r=b(t,this.user,e?.cwd,e?.envs),s=await this.sandbox.exec(r,{timeoutMs:e?.timeoutMs}),{stdout:i,stderr:o}=await this.accumulateStreams(s,e?.onStdout,e?.onStderr);return {exitCode:await s.wait(),stdout:i,stderr:o}}async spawn(t,e){let r=b(t,this.user,e?.cwd,e?.envs),s=await this.sandbox.exec(r,{timeoutMs:e?.timeoutMs}),i="",o="",d=this.accumulateStreams(s,e?.onStdout?c=>{e.onStdout(c);}:void 0,e?.onStderr?c=>{e.onStderr(c);}:void 0).then(({stdout:c,stderr:m})=>{i=c,o=m;}).catch(()=>{});return {processId:`modal-${Date.now()}-${Math.random().toString(36).slice(2)}`,wait:async()=>(await d,{exitCode:await s.wait(),stdout:i,stderr:o}),kill:async()=>false}}async list(){let t=await this.sandbox.exec(["ps","-eo","pid,comm,args"],{timeoutMs:1e4});return await t.wait(),(await t.stdout.readText()).trim().split(`
+`).slice(1).map(s=>{let i=s.trim().split(/\s+/);return {processId:i[0],cmd:i[1]||"",args:i.slice(2),envs:{}}})}async connect(t,e){throw new Error("Modal does not support connecting to existing processes")}async sendStdin(t,e){throw new Error("Modal does not support sendStdin by process ID")}async kill(t){return await(await this.sandbox.exec(["kill","-9",t],{timeoutMs:1e4})).wait()===0}async accumulateStreams(t,e,r){let s="",i="",o=[];return o.push((async()=>{try{for await(let d of t.stdout){let a=typeof d=="string"?d:new TextDecoder().decode(d);s+=a,e?.(a);}}catch{}})()),o.push((async()=>{try{for await(let d of t.stderr){let a=typeof d=="string"?d:new TextDecoder().decode(d);i+=a,r?.(a);}}catch{}})()),await Promise.all(o),{stdout:s,stderr:i}}},v=class{constructor(t,e){this.sandbox=t;this.user=e;}async chownToUser(t,e=false){if(this.user==="root")return;let r=e?["chown","-R",`${this.user}:${this.user}`,t]:["chown",`${this.user}:${this.user}`,t];await(await this.sandbox.exec(r,{timeoutMs:e?3e4:1e4})).wait();}async writeStdinChunked(t,e){for(let r=0;r<e.length;r+=A)await t.writeBytes(e.subarray(r,r+A));}async read(t){if(q(t)){let s=await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"}),i=await s.wait();if(i!==0){let o=await s.stderr.readText();throw new Error(`Failed to read file ${t}: ${o||`exit code ${i}`}`)}return await s.stdout.readBytes()}let e=await this.sandbox.exec(["cat",t],{timeoutMs:3e5}),r=await e.wait();if(r!==0){let s=await e.stderr.readText();throw new Error(`Failed to read file ${t}: ${s||`exit code ${r}`}`)}return await e.stdout.readText()}async write(t,e){let r=this.toBuffer(e),s=t.substring(0,t.lastIndexOf("/"));s&&await this.makeDir(s);let i=t.replace(/'/g,"'\\''"),o=await this.sandbox.exec(["bash","-c",`cat > '${i}'`],{mode:"binary"});await this.writeStdinChunked(o.stdin,new Uint8Array(r)),await o.stdin.getWriter().close(),await o.wait(),await this.chownToUser(t);}async writeBatch(t){let e=tarStream.pack(),r=[],s=new Set;for(let a of t){let c=this.toBuffer(a.data),m=a.path.startsWith("/")?a.path.slice(1):a.path;e.entry({name:m},c);let l=a.path.substring(0,a.path.lastIndexOf("/"));l&&s.add(l);}e.finalize();for await(let a of e)r.push(Buffer.from(a));let i=Buffer.concat(r),o=await this.sandbox.exec(["tar","-xf","-","-C","/"],{mode:"binary"});if(await this.writeStdinChunked(o.stdin,new Uint8Array(i)),await o.stdin.getWriter().close(),await o.wait(),s.size>0){let a=Array.from(s),c=new Set(a.map(m=>m.split("/").slice(0,4).join("/")));for(let m of c)await this.chownToUser(m,true);}}async makeDir(t){await(await this.sandbox.exec(["mkdir","-p",t],{timeoutMs:1e4})).wait(),await this.chownToUser(t,true);}async exists(t){return await(await this.sandbox.exec(["test","-e",t],{timeoutMs:1e4})).wait()===0}async list(t){let e=t.replace(/'/g,"'\\''"),r=await this.sandbox.exec(["bash","-c",`ls -la '${e}' | tail -n +2`],{timeoutMs:3e4});await r.wait();let s=await r.stdout.readText(),i=[];for(let o of s.trim().split(`
+`)){if(!o)continue;let d=o.split(/\s+/);if(d.length<9)continue;let a=d[0],c=d.slice(8).join(" ");c==="."||c===".."||i.push({name:c,path:t.endsWith("/")?`${t}${c}`:`${t}/${c}`,type:a.startsWith("d")?"dir":"file"});}return i}async remove(t){await(await this.sandbox.exec(["rm","-rf",t],{timeoutMs:3e4})).wait();}async rename(t,e){await(await this.sandbox.exec(["mv",t,e],{timeoutMs:3e4})).wait();}async readStream(t){return (await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"})).stdout}async writeStream(t,e){let r=t.substring(0,t.lastIndexOf("/"));r&&await this.makeDir(r);let s=t.replace(/'/g,"'\\''"),i=await this.sandbox.exec(["bash","-c",`cat > '${s}'`],{mode:"binary"}),o=e.getReader();try{for(;;){let{done:a,value:c}=await o.read();if(a)break;await this.writeStdinChunked(i.stdin,c);}}finally{o.releaseLock();}await i.stdin.getWriter().close(),await i.wait(),await this.chownToUser(t);}async writeFromPath(t,e){let{createReadStream:r}=await import('fs'),{Readable:s}=await import('stream'),i=s.toWeb(r(e));await this.writeStream(t,i);}async uploadUrl(t,e){throw new Error("Modal does not support pre-signed upload URLs")}async downloadUrl(t,e){throw new Error("Modal does not support pre-signed download URLs")}async watchDir(t,e,r){throw new Error("Modal does not support watchDir")}toBuffer(t){if(typeof t=="string")return Buffer.from(t,"utf-8");if(t instanceof Buffer)return t;if(t instanceof ArrayBuffer||t instanceof Uint8Array)return Buffer.from(t);throw new Error(`Unsupported data type: ${typeof t}`)}},g=class{constructor(t,e,r){this.sandbox=t;this.commands=new y(t,r),this.files=new v(t,r),this.image=e;}commands;files;image;get sandboxId(){return this.sandbox.sandboxId}async getHost(t){let r=(await this.sandbox.tunnels())[t];if(!r)throw new Error(`No tunnel found for port ${t}`);return r.url}async isRunning(){try{return await this.sandbox.poll()===null}catch{return  false}}async getInfo(){let t=await this.sandbox.getTags();return I(this.sandbox.sandboxId,t,this.image)}async kill(){try{await this.sandbox.terminate();}catch{await new Promise(t=>setTimeout(t,500)),await this.sandbox.terminate();}}async pause(){throw new Error("Modal does not support pause/resume. Persist progress with Evolve checkpoints and resume in a fresh sandbox, or use kill() to terminate.")}},P=class{providerType="modal";name="Modal";client;appName;defaultTimeoutMs;imageName;imageSecretName;_app;sandboxUsers=new Map;constructor(t){!t.endpoint&&process.env.MODAL_SERVER_URL?.startsWith("unix:")?process.env.MODAL_SERVER_URL="https://api.modal.com:443":t.endpoint&&(process.env.MODAL_SERVER_URL=t.endpoint),this.client=new modal.ModalClient({tokenId:t.tokenId,tokenSecret:t.tokenSecret}),this.appName=t.appName??"evolve-sandbox",this.defaultTimeoutMs=t.defaultTimeoutMs??36e5,this.imageName=t.imageName??"evolve-all",this.imageSecretName=t.imageSecretName;}async getApp(){return this._app||(this._app=await this.client.apps.fromName(this.appName,{createIfMissing:true})),this._app}async resolveImage(t){let e=$(t);if(e==="registry"){let s=this.imageSecretName?await this.client.secrets.fromName(this.imageSecretName):void 0;return this.client.images.fromRegistry(t,s)}if(!this.imageSecretName)throw new Error(`Private registry image "${t}" requires config.imageSecretName \u2014 the name of a Modal Secret holding registry credentials (AWS ECR: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION with read-only ECR IAM). Create one at https://modal.com/secrets`);let r=await this.client.secrets.fromName(this.imageSecretName);return e==="aws-ecr"?this.client.images.fromAwsEcr(t,r):this.client.images.fromGcpArtifactRegistry(t,r)}async create(t){let e=t.timeoutMs??this.defaultTimeoutMs;C(e);let r=O(t.idleTimeoutMs),s=T(t.network),i=N(t.resources),o=t.user??k,d=await this.getApp(),a=t.image||this.imageName,c=H[a]??a,l=await(await this.resolveImage(c)).build(d),f=t.envs?Object.fromEntries(Object.entries(t.envs).filter(([,h])=>h!=null)):void 0,B=f&&Object.keys(f).length>0?f:void 0,U={...t.metadata,[R]:c,[_]:new Date().toISOString()},w=await this.client.sandboxes.create(d,l,{cpu:i.cpu,memoryMiB:i.memoryMiB,timeoutMs:e,...r,workdir:t.workingDirectory,env:B,tags:U,...s});return t.workingDirectory&&o!=="root"&&await(await w.exec(["chown","-R",`${o}:${o}`,t.workingDirectory],{timeoutMs:3e4})).wait(),this.sandboxUsers.set(w.sandboxId,o),new g(w,c,o)}async connect(t,e){let r=await this.client.sandboxes.fromId(t),s=this.sandboxUsers.get(t)??k;return new g(r,void 0,s)}async list(t){let e=await this.walk(t);if(e.error&&!e.stoppedAtLimit)throw new Error(e.error);return e.sandboxes}async listAll(t){let{stoppedAtLimit:e,...r}=await this.walk(t);return r}async walk(t){if(t?.state&&!t.state.includes("running"))return {sandboxes:[],complete:true,pagesFetched:0,stoppedAtLimit:false};let e;try{e=await this.getApp();}catch(r){return {sandboxes:[],complete:false,pagesFetched:0,stoppedAtLimit:false,error:`sandbox list failed: ${r instanceof Error?r.message:String(r)}`}}return L(()=>this.client.sandboxes.list({appId:e.appId,tags:t?.metadata}),t?.limit)}async listSandboxIds(){let t=new Set;try{let e=await this.getApp();for await(let r of this.client.sandboxes.list({appId:e.appId}))t.add(r.sandboxId);return {ids:t,complete:!0}}catch{return {ids:new Set,complete:false}}}};async function L(n,t){let e=[];try{for await(let r of n()){if(t!==void 0&&e.length>=t)return {sandboxes:e,complete:!1,pagesFetched:e.length,stoppedAtLimit:!0,error:`stopped at the requested limit of ${t} with more sandboxes available`};if(e.length>=M)return {sandboxes:e,complete:!1,pagesFetched:e.length,stoppedAtLimit:!1,error:`sandbox list exceeded ${M} sandboxes`};let s=await r.getTags();e.push(I(r.sandboxId,s));}}catch(r){return {sandboxes:e,complete:false,pagesFetched:e.length,stoppedAtLimit:false,error:`sandbox list failed: ${r instanceof Error?r.message:String(r)}`}}return {sandboxes:e,complete:true,pagesFetched:e.length,stoppedAtLimit:false}}function rt(n={}){let t=n.tokenId??process.env.MODAL_TOKEN_ID,e=n.tokenSecret??process.env.MODAL_TOKEN_SECRET;if(!t||!e)throw new Error("Modal credentials required. Set MODAL_TOKEN_ID and MODAL_TOKEN_SECRET environment variables, or pass tokenId/tokenSecret in config. Get your token at https://modal.com/settings/tokens");return new P({...n,tokenId:t,tokenSecret:e})}var st=b,nt=T,it=N,ot=$,at=I,dt=L,ct=C,mt=O;
+exports.MODAL_MAX_LIFETIME_MS=E;exports.MODAL_MAX_LIST_SANDBOXES=M;exports.MODAL_STDIN_CHUNK_BYTES=A;exports.ModalCommands=y;exports.ModalFiles=v;exports.ModalIdleTimeoutError=p;exports.ModalNetworkPolicyError=u;exports.ModalProvider=P;exports.ModalResourcesError=S;exports.ModalSandboxLifetimeError=x;exports._testBuildSandboxInfo=at;exports._testCollectSandboxes=dt;exports._testMapIdleTimeout=mt;exports._testMapNetworkPolicy=nt;exports._testMapResources=it;exports._testResolveImageRegistry=ot;exports._testValidateTimeout=ct;exports._testWrapCommand=st;exports.createModalProvider=rt;

package/dist/index.d.cts

@@ -1,7 +1,9 @@
+import { Sandbox } from 'modal';
+
 /**
  * Modal Sandbox Provider - Clean Architecture
  *
- * @requires modal >= 0.3.0
+ * @requires modal >= 0.9.0
  * @requires Node.js >= 18 (for ReadableStream support)
  *
  * Design principles:
@@ -13,9 +15,149 @@
  *
  * Modal-specific notes:
  * - No native file APIs - uses exec() with stdin/stdout
- * - pause() not supported - throws error
+ * - pause() not supported - throws error (use Evolve checkpoints for persistence)
  * - Requires app context for sandbox creation
+ * - Hard 24h sandbox lifetime cap (ModalSandboxLifetimeError when exceeded)
+ * - Everything executes as root inside the sandbox; the `user` option is
+ *   enforced through an `su <user> -c` wrapper (default user: "user")
+ * - Network policy maps to Modal's blockNetwork / outboundDomainAllowlist /
+ *   outboundCidrAllowlist (domain allowlist admits TLS on port 443 only —
+ *   plaintext destinations must be listed as IPs/CIDRs)
+ * - Modal exposes no metadata or public timestamps on sandboxes; both are
+ *   stamped into sandbox tags at create time and read back via getTags()
+ */
+
+/**
+ * Modal's hard cap on sandbox lifetime (24 hours).
+ * Requests beyond this throw ModalSandboxLifetimeError.
+ */
+declare const MODAL_MAX_LIFETIME_MS: number;
+/**
+ * Chunk size for stdin uploads. Modal's gRPC transport rejects any single
+ * TaskExecStdinWrite message larger than 100MiB (RESOURCE_EXHAUSTED at
+ * 104,857,600 bytes), so file payloads are split into 8MiB writeBytes()
+ * calls — the same per-chunk pattern writeStream() uses.
+ */
+declare const MODAL_STDIN_CHUNK_BYTES: number;
+/**
+ * Typed error for Modal's hard 24h sandbox lifetime cap.
+ * Long-running sessions must persist progress with Evolve checkpoints and
+ * resume in a fresh sandbox instead of extending the timeout.
+ */
+declare class ModalSandboxLifetimeError extends Error {
+    readonly requestedTimeoutMs: number;
+    constructor(requestedTimeoutMs: number);
+}
+/** Throws ModalSandboxLifetimeError when the timeout exceeds Modal's 24h cap. */
+declare function validateTimeout(timeoutMs: number): void;
+/**
+ * Typed error for an idle timeout Modal could not act on. Both bounds are
+ * refusals rather than clamps: silently raising a zero, or lowering a value past
+ * the lifetime cap, would hand back a box that dies on a schedule the caller
+ * never asked for.
  */
+declare class ModalIdleTimeoutError extends Error {
+    readonly requestedIdleTimeoutMs: number;
+    constructor(requestedIdleTimeoutMs: number, reason: string);
+}
+/**
+ * Evolve's idle bound -> Modal's create params, same shape as mapNetworkPolicy
+ * and mapResources: provider-neutral option in, Modal fragment out.
+ *
+ * ABSENT MEANS ABSENT. Modal's own default is no idle timer at all, so an unset
+ * option must spread to nothing — inventing a default here would start killing
+ * boxes that today live out their lifetime, for every caller who never asked.
+ *
+ * An idle timeout has to be a positive span, and one above the 24h lifetime cap
+ * can never fire because the sandbox is already gone. Both are caller mistakes,
+ * and both throw rather than clamp: silently raising a zero or lowering an
+ * over-cap value hands back a box that dies on a schedule nobody chose.
+ */
+declare function mapIdleTimeout(idleTimeoutMs?: number): {
+    idleTimeoutMs?: number;
+};
+/**
+ * Wrap a command with cwd + env handling and (when not root) an
+ * `su <user> -c` wrapper.
+ *
+ * Modal sandboxes run as root by default (ignoring the Dockerfile USER
+ * directive), but Claude CLI and other tools refuse certain operations when
+ * running as root.
+ *
+ * Uses `su <user> -c` instead of `sudo -u <user>` because Claude CLI's
+ * --dangerously-skip-permissions flag refuses to run when it detects sudo.
+ *
+ * Uses base64 encoding to avoid shell escaping issues with complex commands
+ * that contain quotes, special characters, etc. Env vars are inlined because
+ * su does not preserve the environment the way `sudo -E` does.
+ */
+declare function wrapCommand(command: string, user: string, cwd?: string, envs?: Record<string, string>): string[];
+/**
+ * Typed error for sizing requests Modal's create() cannot enforce.
+ * The installed Modal JS SDK sizes cpu (cores) and memoryMiB at create time
+ * only — there is no disk-size parameter, so a requested disk size would be
+ * silently ignored. Per the provider law (reject what you cannot enforce,
+ * never silently ignore) it is refused loudly here.
+ */
+declare class ModalResourcesError extends Error {
+    constructor(message: string);
+}
+/**
+ * Map Evolve's provider-neutral resources (cpu cores, memory GiB, disk GiB)
+ * onto Modal's create() params (cpu cores, memoryMiB). Fractional GiB rounds
+ * UP so the sandbox never gets less memory than requested. `disk` throws
+ * ModalResourcesError — the SDK cannot express it.
+ */
+declare function mapResources(resources?: SandboxCreateOptions["resources"]): {
+    cpu: number;
+    memoryMiB: number;
+};
+/** Modal create() params derived from Evolve's provider-neutral network policy. */
+interface ModalNetworkCreateParams {
+    blockNetwork?: boolean;
+    outboundCidrAllowlist?: string[];
+    outboundDomainAllowlist?: string[];
+}
+/** Why a network destination cannot be mapped onto Modal's allowlist. */
+type ModalNetworkPolicyReason = "port-unsupported" | "invalid-ipv4";
+/**
+ * Typed error for destinations Modal's allowlist cannot express.
+ *
+ * Modal's allowlist filters hosts (domain allowlist) and IPs/CIDRs (CIDR
+ * allowlist) only — it has no notion of a port, and an invalid IPv4/CIDR
+ * would be silently forwarded to the API. Both are rejected loudly here
+ * instead of weakening or mangling the sandbox's egress policy.
+ */
+declare class ModalNetworkPolicyError extends Error {
+    readonly reason: ModalNetworkPolicyReason;
+    /** The offending destination. */
+    readonly destination?: string;
+    constructor(reason: ModalNetworkPolicyReason, message: string, destination?: string);
+}
+/**
+ * Map Evolve's provider-neutral network policy onto Modal create() params.
+ *
+ * - outbound "open" (or no policy)     → no restrictions
+ * - outbound "blocked", no allowlist   → blockNetwork: true (drops all egress)
+ * - outbound "blocked" with allowlist  → outboundDomainAllowlist (hostnames,
+ *   wildcards like "*.example.com") + outboundCidrAllowlist (IPs/CIDRs; bare
+ *   IPs get /32 or /128 appended). Both lists are always set because Modal
+ *   treats an unset list as "allow all" — an empty array means "allow none"
+ *   for that class of destination. Note: Modal's domain allowlist only admits
+ *   TLS traffic on port 443; plaintext destinations must be listed as CIDRs.
+ */
+declare function mapNetworkPolicy(network?: SandboxCreateOptions["network"]): ModalNetworkCreateParams;
+/** Container registry family for an image tag. */
+type ImageRegistry = "aws-ecr" | "gcp-artifact-registry" | "registry";
+/** Detect which Modal image constructor an image tag needs. */
+declare function resolveImageRegistry(tag: string): ImageRegistry;
+/**
+ * Build a SandboxInfo from a sandbox's tags. Modal exposes no metadata or
+ * public timestamps, so image and startedAt come from the tags stamped at
+ * create time; for sandboxes not created by this SDK they are empty strings
+ * (never fabricated). endAt is always undefined — Modal does not expose it.
+ */
+declare function buildSandboxInfo(sandboxId: string, tags: Record<string, string>, fallbackImage?: string): SandboxInfo;
 /** Result of a completed sandbox command */
 interface SandboxCommandResult {
     exitCode: number;
@@ -93,15 +235,83 @@ interface SandboxCreateOptions {
     image?: string;
     envs?: Record<string, string>;
     metadata?: Record<string, string>;
+    /** Sandbox lifetime in ms. Modal hard-caps lifetime at 24h (MODAL_MAX_LIFETIME_MS). */
     timeoutMs?: number;
+    /**
+     * Terminate the sandbox after this long with nothing running in it — the
+     * bound that reclaims a box whose client died, without waiting out the whole
+     * lifetime. Modal is the only provider with both clocks.
+     *
+     * OMITTED BY DEFAULT: Modal runs no idle timer unless asked. Modal counts a
+     * sandbox active while an exec is running, while its stdin is being written,
+     * or while a tunnel connection is open — file operations are not named in
+     * that list, and this adapter is safe only because it routes reads and writes
+     * through exec (`cat` / `cat >`). A future native filesystem path would need
+     * this re-checked.
+     */
+    idleTimeoutMs?: number;
     workingDirectory?: string;
+    /**
+     * Per-sandbox compute sizing: cpu in cores, memory in GiB — mapped to
+     * Modal's create-time cpu / memoryMiB requests (defaults when omitted:
+     * 4 cores / 4 GiB). `disk` is REJECTED with ModalResourcesError: the Modal
+     * JS SDK exposes no disk-size parameter, so a specific disk size cannot be
+     * enforced (containers get Modal's default disk quota).
+     */
+    resources?: {
+        cpu?: number;
+        memory?: number;
+        disk?: number;
+    };
+    /**
+     * Provider-neutral outbound network policy, enforced by Modal's network
+     * stack. "blocked" with no allowedDestinations drops all egress; with
+     * allowedDestinations, hostnames go to Modal's domain allowlist (TLS/443
+     * only) and IPs/CIDRs to the CIDR allowlist.
+     */
+    network?: {
+        outbound: "open" | "blocked";
+        allowedDestinations?: string[];
+    };
+    /**
+     * Run all commands and file operations as this user (default "user"),
+     * enforced via an `su <user> -c` wrapper since Modal executes everything as
+     * root. Pass "root" to run directly as root with no wrapper.
+     */
+    user?: string;
+    /** Home directory used by the SDK for agent config paths; not consumed by the provider. */
+    homeDir?: string;
 }
 /** Options for listing sandboxes */
 interface SandboxListOptions {
+    /** Modal has no paused state; filters that exclude "running" match nothing. */
     state?: ("running" | "paused")[];
     metadata?: Record<string, string>;
     limit?: number;
 }
+/**
+ * A COMPLETE (or admittedly incomplete) enumeration of the app's fleet.
+ *
+ * `complete` is the load-bearing field. Callers that need a whole fleet —
+ * orphan sweeps, lifecycle reconciliation — read a sandbox's ABSENCE from the
+ * list as evidence it is gone, so a truncated walk and a small fleet must never
+ * be the same answer. That includes a walk stopped by the caller's own `limit`:
+ * "you asked for ten and there are more" is a truncated fleet.
+ */
+interface SandboxListPage {
+    sandboxes: SandboxInfo[];
+    complete: boolean;
+    pagesFetched: number;
+    error?: string;
+}
+/**
+ * Sandboxes a single enumeration will walk before it gives up and reports
+ * itself incomplete. Modal's list is an async generator with no page size we
+ * control, so the ceiling is counted in SANDBOXES rather than pages — same
+ * purpose as the other providers' page caps: never return a short list that
+ * reads like a whole one.
+ */
+declare const MODAL_MAX_LIST_SANDBOXES = 10000;
 /** Command execution capabilities */
 interface SandboxCommands {
     /** Run command and wait for completion */
@@ -132,6 +342,8 @@ interface SandboxFiles {
     readStream(path: string): Promise<ReadableStream<Uint8Array>>;
     /** Write from stream */
     writeStream(path: string, stream: ReadableStream<Uint8Array>): Promise<void>;
+    /** Upload a local file by path, streamed off disk (never buffered whole) */
+    writeFromPath(sandboxPath: string, localPath: string): Promise<void>;
     /** Get pre-signed upload URL for large files (expiration in seconds) */
     uploadUrl(path: string, expiresInSeconds?: number): Promise<string>;
     /** Get pre-signed download URL for large files (expiration in seconds) */
@@ -169,12 +381,17 @@ interface SandboxInstance {
 interface SandboxProvider {
     /** Provider type identifier */
     readonly providerType: string;
+    /** Human-readable provider name for logging */
+    readonly name?: string;
     /** Create new sandbox */
     create(options: SandboxCreateOptions): Promise<SandboxInstance>;
     /** Connect to existing sandbox */
     connect(sandboxId: string, timeoutMs?: number): Promise<SandboxInstance>;
     /** List sandboxes (first page only, up to limit) */
+    /** List sandboxes, walking the whole app. `limit` bounds items returned. */
     list(options?: SandboxListOptions): Promise<SandboxInfo[]>;
+    /** The same enumeration for fleet bookkeeping: never throws, reports completeness. */
+    listAll(options?: SandboxListOptions): Promise<SandboxListPage>;
 }
 interface ModalConfig {
     /** Modal app name. Default: "evolve-sandbox" */
@@ -189,6 +406,13 @@ interface ModalConfig {
     endpoint?: string;
     /** Docker image name (default: 'evolve-all'). Resolved through IMAGE_MAP or used as-is for custom images. */
     imageName?: string;
+    /**
+     * Name of a Modal Secret holding registry credentials for private images.
+     * Required for AWS ECR (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,
+     * AWS_REGION with read-only ECR IAM) and GCP Artifact Registry; optional
+     * for private Docker Hub images. Create one at https://modal.com/secrets
+     */
+    imageSecretName?: string;
 }
 /** Internal resolved config with required credentials */
 interface ResolvedModalConfig {
@@ -198,6 +422,64 @@ interface ResolvedModalConfig {
     defaultTimeoutMs?: number;
     endpoint?: string;
     imageName?: string;
+    imageSecretName?: string;
+}
+declare class ModalCommands implements SandboxCommands {
+    private sandbox;
+    private user;
+    constructor(sandbox: Sandbox, user: string);
+    run(command: string, options?: SandboxRunOptions): Promise<SandboxCommandResult>;
+    spawn(command: string, options?: SandboxSpawnOptions): Promise<SandboxCommandHandle>;
+    list(): Promise<ProcessInfo[]>;
+    connect(_processId: string, _options?: SandboxConnectOptions): Promise<SandboxCommandHandle>;
+    sendStdin(_processId: string, _data: string): Promise<void>;
+    kill(processId: string): Promise<boolean>;
+    /**
+     * Accumulate stdout/stderr using for-await pattern (more reliable with Modal streams).
+     * Based on vibekit's approach which works correctly with Modal SDK.
+     */
+    private accumulateStreams;
+}
+declare class ModalFiles implements SandboxFiles {
+    private sandbox;
+    private user;
+    constructor(sandbox: Sandbox, user: string);
+    /**
+     * Chown a path to the sandbox user so agent CLIs (running via the su
+     * wrapper) can access files created by root-level exec. No-op when the
+     * sandbox user is root.
+     */
+    private chownToUser;
+    /**
+     * Write a payload to a process's stdin in MODAL_STDIN_CHUNK_BYTES slices.
+     * Each writeBytes() call becomes one gRPC TaskExecStdinWrite message and
+     * Modal rejects messages over 100MiB, so large files must be chunked
+     * (multi-hundred-MB payloads are common).
+     */
+    private writeStdinChunked;
+    read(path: string): Promise<string | Uint8Array>;
+    write(path: string, content: string | Buffer | ArrayBuffer | Uint8Array): Promise<void>;
+    writeBatch(files: Array<{
+        path: string;
+        data: string | Buffer | ArrayBuffer | Uint8Array;
+    }>): Promise<void>;
+    makeDir(path: string): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    list(path: string): Promise<FileInfo[]>;
+    remove(path: string): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    readStream(path: string): Promise<ReadableStream<Uint8Array>>;
+    writeStream(path: string, stream: ReadableStream<Uint8Array>): Promise<void>;
+    /**
+     * Upload a local file by PATH, chunk by chunk into the same `cat >` sink
+     * writeStream() uses — so peak memory is one chunk rather than the whole
+     * file, which is what makes a large artifact safe under concurrency.
+     */
+    writeFromPath(sandboxPath: string, localPath: string): Promise<void>;
+    uploadUrl(_path: string, _expiresInSeconds?: number): Promise<string>;
+    downloadUrl(_path: string, _expiresInSeconds?: number): Promise<string>;
+    watchDir(_path: string, _onEvent: (event: FilesystemEvent) => void | Promise<void>, _options?: WatchOptions): Promise<WatchHandle>;
+    private toBuffer;
 }
 declare class ModalProvider implements SandboxProvider {
     readonly providerType: "modal";
@@ -206,13 +488,103 @@ declare class ModalProvider implements SandboxProvider {
     private readonly appName;
     private readonly defaultTimeoutMs;
     private readonly imageName;
+    private readonly imageSecretName?;
     private _app;
+    /**
+     * Sandbox user configured at create time, reapplied on connect() so the su
+     * wrapper keeps targeting the same account. In-memory only: a connect()
+     * from a fresh process falls back to the default "user" account — callers
+     * reconnecting across processes must recreate the provider and sandbox with
+     * the same user, or operations on user-owned files fail loudly.
+     */
+    private readonly sandboxUsers;
     constructor(config: ResolvedModalConfig);
     private getApp;
+    /**
+     * Build a Modal Image for the resolved tag, routing private registries
+     * (AWS ECR, GCP Artifact Registry) through the configured Modal Secret.
+     */
+    private resolveImage;
     create(options: SandboxCreateOptions): Promise<SandboxInstance>;
     connect(sandboxId: string, _timeoutMs?: number): Promise<SandboxInstance>;
-    list(_options?: SandboxListOptions): Promise<SandboxInfo[]>;
+    /**
+     * List sandboxes, walking the whole app.
+     *
+     * This used to stop at a hardcoded default of 100 regardless of fleet size,
+     * which silently truncated any app with more — and said nothing about it
+     * while the shared SandboxProvider interface promised exhaustive listing.
+     * `limit` still bounds the sandboxes RETURNED, so a caller wanting one cheap
+     * sample asks for one; without it the answer is the whole app.
+     *
+     * The O(N)-round-trips warning below is unchanged and is the reason `limit`
+     * matters here more than on the other providers.
+     */
+    list(options?: SandboxListOptions): Promise<SandboxInfo[]>;
+    /**
+     * The fleet-bookkeeping enumeration: same walk, never throws.
+     *
+     * Modal has no lifecycle webhooks, so absence from a list is the ONLY
+     * termination signal either lane gets — which makes the difference between
+     * "the app is empty" and "the enumeration stopped early" the difference
+     * between a quiet fleet and one about to be reclaimed.
+     *
+     * NOTE the divergence from `listSandboxIds` below, which returns an EMPTY set
+     * on failure on the grounds that partial results are worse than none for a
+     * terminal-state decision. This one returns what it saw alongside
+     * `complete: false`. Both are safe because `complete` is what callers branch
+     * on, and the shared type documents the choice; do not align one to the other
+     * without deciding which rule you want.
+     */
+    listAll(options?: SandboxListOptions): Promise<SandboxListPage>;
+    private walk;
+    /**
+     * Live sandbox ids for the whole app, in ONE streamed call and O(1) round
+     * trips — the fleet-bookkeeping counterpart to `list()`.
+     *
+     * Exists because `list()` cannot be made cheap without dropping metadata from
+     * its contract: it owes callers a populated `SandboxInfo.metadata`, and Modal
+     * only serves tags per sandbox. Anything that just needs "which ids are
+     * alive" — lifecycle polling, orphan sweeps, reconciliation — uses this and
+     * pays one request no matter how large the fleet is.
+     *
+     * `complete` is the load-bearing field, not a nicety: absence from this list
+     * is what callers read as "terminated", so a truncated or errored enumeration
+     * MUST NOT be mistaken for an empty fleet. A caller that sees complete=false
+     * has to leave rows alone rather than mass-marking live sandboxes dead.
+     */
+    listSandboxIds(): Promise<{
+        ids: Set<string>;
+        complete: boolean;
+    }>;
+}
+/** The streamed sandbox surface this walk needs — Modal's list() satisfies it. */
+interface ModalSandboxStream {
+    sandboxId: string;
+    getTags(): Promise<Record<string, string>>;
 }
+/**
+ * Drain Modal's sandbox generator into one answer, with an honest completeness
+ * verdict.
+ *
+ * Separate from the provider because everything worth getting wrong lives here
+ * and none of it needs a gRPC connection: the difference between "the caller
+ * asked for ten" and "the app ran out", the ceiling that stops an unbounded
+ * walk, and the rule that a failure mid-walk yields what it saw marked
+ * INCOMPLETE rather than an exception or a short complete list.
+ *
+ * COST WARNING — this loop is O(N) ROUND TRIPS, not O(1). `list()` itself is one
+ * streamed call, but `getTags()` is a separate gRPC request per sandbox
+ * (`sandboxTagsGet`), so listing N sandboxes costs N+1 calls. That is fine for a
+ * user listing their handful of boxes with metadata, and NOT fine for fleet-wide
+ * bookkeeping: anything that only needs to know WHICH ids are alive must use
+ * `listSandboxIds`, never this. Please do not "optimize" by reintroducing tag
+ * reads into those paths.
+ *
+ * Exported for its test (`_testCollectSandboxes`).
+ */
+declare function collectSandboxes(iterate: () => AsyncIterable<ModalSandboxStream>, wanted?: number): Promise<SandboxListPage & {
+    stoppedAtLimit: boolean;
+}>;
 /**
  * Create Modal sandbox provider.
  *
@@ -222,5 +594,13 @@ declare class ModalProvider implements SandboxProvider {
  * @see https://github.com/evolving-machines-lab/evolve/issues/8
  */
 declare function createModalProvider(config?: ModalConfig): SandboxProvider;
+declare const _testWrapCommand: typeof wrapCommand;
+declare const _testMapNetworkPolicy: typeof mapNetworkPolicy;
+declare const _testMapResources: typeof mapResources;
+declare const _testResolveImageRegistry: typeof resolveImageRegistry;
+declare const _testBuildSandboxInfo: typeof buildSandboxInfo;
+declare const _testCollectSandboxes: typeof collectSandboxes;
+declare const _testValidateTimeout: typeof validateTimeout;
+declare const _testMapIdleTimeout: typeof mapIdleTimeout;
 
-export { type FileInfo, type FilesystemEvent, type ModalConfig, ModalProvider, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxConnectOptions, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxProvider, type SandboxRunOptions, type SandboxSpawnOptions, type WatchHandle, type WatchOptions, createModalProvider };
+export { type FileInfo, type FilesystemEvent, MODAL_MAX_LIFETIME_MS, MODAL_MAX_LIST_SANDBOXES, MODAL_STDIN_CHUNK_BYTES, ModalCommands, type ModalConfig, ModalFiles, ModalIdleTimeoutError, ModalNetworkPolicyError, type ModalNetworkPolicyReason, ModalProvider, ModalResourcesError, ModalSandboxLifetimeError, type ModalSandboxStream, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxConnectOptions, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxListPage, type SandboxProvider, type SandboxRunOptions, type SandboxSpawnOptions, type WatchHandle, type WatchOptions, _testBuildSandboxInfo, _testCollectSandboxes, _testMapIdleTimeout, _testMapNetworkPolicy, _testMapResources, _testResolveImageRegistry, _testValidateTimeout, _testWrapCommand, createModalProvider };

package/dist/index.d.ts

@@ -1,7 +1,9 @@
+import { Sandbox } from 'modal';
+
 /**
  * Modal Sandbox Provider - Clean Architecture
  *
- * @requires modal >= 0.3.0
+ * @requires modal >= 0.9.0
  * @requires Node.js >= 18 (for ReadableStream support)
  *
  * Design principles:
@@ -13,9 +15,149 @@
  *
  * Modal-specific notes:
  * - No native file APIs - uses exec() with stdin/stdout
- * - pause() not supported - throws error
+ * - pause() not supported - throws error (use Evolve checkpoints for persistence)
  * - Requires app context for sandbox creation
+ * - Hard 24h sandbox lifetime cap (ModalSandboxLifetimeError when exceeded)
+ * - Everything executes as root inside the sandbox; the `user` option is
+ *   enforced through an `su <user> -c` wrapper (default user: "user")
+ * - Network policy maps to Modal's blockNetwork / outboundDomainAllowlist /
+ *   outboundCidrAllowlist (domain allowlist admits TLS on port 443 only —
+ *   plaintext destinations must be listed as IPs/CIDRs)
+ * - Modal exposes no metadata or public timestamps on sandboxes; both are
+ *   stamped into sandbox tags at create time and read back via getTags()
+ */
+
+/**
+ * Modal's hard cap on sandbox lifetime (24 hours).
+ * Requests beyond this throw ModalSandboxLifetimeError.
+ */
+declare const MODAL_MAX_LIFETIME_MS: number;
+/**
+ * Chunk size for stdin uploads. Modal's gRPC transport rejects any single
+ * TaskExecStdinWrite message larger than 100MiB (RESOURCE_EXHAUSTED at
+ * 104,857,600 bytes), so file payloads are split into 8MiB writeBytes()
+ * calls — the same per-chunk pattern writeStream() uses.
+ */
+declare const MODAL_STDIN_CHUNK_BYTES: number;
+/**
+ * Typed error for Modal's hard 24h sandbox lifetime cap.
+ * Long-running sessions must persist progress with Evolve checkpoints and
+ * resume in a fresh sandbox instead of extending the timeout.
+ */
+declare class ModalSandboxLifetimeError extends Error {
+    readonly requestedTimeoutMs: number;
+    constructor(requestedTimeoutMs: number);
+}
+/** Throws ModalSandboxLifetimeError when the timeout exceeds Modal's 24h cap. */
+declare function validateTimeout(timeoutMs: number): void;
+/**
+ * Typed error for an idle timeout Modal could not act on. Both bounds are
+ * refusals rather than clamps: silently raising a zero, or lowering a value past
+ * the lifetime cap, would hand back a box that dies on a schedule the caller
+ * never asked for.
  */
+declare class ModalIdleTimeoutError extends Error {
+    readonly requestedIdleTimeoutMs: number;
+    constructor(requestedIdleTimeoutMs: number, reason: string);
+}
+/**
+ * Evolve's idle bound -> Modal's create params, same shape as mapNetworkPolicy
+ * and mapResources: provider-neutral option in, Modal fragment out.
+ *
+ * ABSENT MEANS ABSENT. Modal's own default is no idle timer at all, so an unset
+ * option must spread to nothing — inventing a default here would start killing
+ * boxes that today live out their lifetime, for every caller who never asked.
+ *
+ * An idle timeout has to be a positive span, and one above the 24h lifetime cap
+ * can never fire because the sandbox is already gone. Both are caller mistakes,
+ * and both throw rather than clamp: silently raising a zero or lowering an
+ * over-cap value hands back a box that dies on a schedule nobody chose.
+ */
+declare function mapIdleTimeout(idleTimeoutMs?: number): {
+    idleTimeoutMs?: number;
+};
+/**
+ * Wrap a command with cwd + env handling and (when not root) an
+ * `su <user> -c` wrapper.
+ *
+ * Modal sandboxes run as root by default (ignoring the Dockerfile USER
+ * directive), but Claude CLI and other tools refuse certain operations when
+ * running as root.
+ *
+ * Uses `su <user> -c` instead of `sudo -u <user>` because Claude CLI's
+ * --dangerously-skip-permissions flag refuses to run when it detects sudo.
+ *
+ * Uses base64 encoding to avoid shell escaping issues with complex commands
+ * that contain quotes, special characters, etc. Env vars are inlined because
+ * su does not preserve the environment the way `sudo -E` does.
+ */
+declare function wrapCommand(command: string, user: string, cwd?: string, envs?: Record<string, string>): string[];
+/**
+ * Typed error for sizing requests Modal's create() cannot enforce.
+ * The installed Modal JS SDK sizes cpu (cores) and memoryMiB at create time
+ * only — there is no disk-size parameter, so a requested disk size would be
+ * silently ignored. Per the provider law (reject what you cannot enforce,
+ * never silently ignore) it is refused loudly here.
+ */
+declare class ModalResourcesError extends Error {
+    constructor(message: string);
+}
+/**
+ * Map Evolve's provider-neutral resources (cpu cores, memory GiB, disk GiB)
+ * onto Modal's create() params (cpu cores, memoryMiB). Fractional GiB rounds
+ * UP so the sandbox never gets less memory than requested. `disk` throws
+ * ModalResourcesError — the SDK cannot express it.
+ */
+declare function mapResources(resources?: SandboxCreateOptions["resources"]): {
+    cpu: number;
+    memoryMiB: number;
+};
+/** Modal create() params derived from Evolve's provider-neutral network policy. */
+interface ModalNetworkCreateParams {
+    blockNetwork?: boolean;
+    outboundCidrAllowlist?: string[];
+    outboundDomainAllowlist?: string[];
+}
+/** Why a network destination cannot be mapped onto Modal's allowlist. */
+type ModalNetworkPolicyReason = "port-unsupported" | "invalid-ipv4";
+/**
+ * Typed error for destinations Modal's allowlist cannot express.
+ *
+ * Modal's allowlist filters hosts (domain allowlist) and IPs/CIDRs (CIDR
+ * allowlist) only — it has no notion of a port, and an invalid IPv4/CIDR
+ * would be silently forwarded to the API. Both are rejected loudly here
+ * instead of weakening or mangling the sandbox's egress policy.
+ */
+declare class ModalNetworkPolicyError extends Error {
+    readonly reason: ModalNetworkPolicyReason;
+    /** The offending destination. */
+    readonly destination?: string;
+    constructor(reason: ModalNetworkPolicyReason, message: string, destination?: string);
+}
+/**
+ * Map Evolve's provider-neutral network policy onto Modal create() params.
+ *
+ * - outbound "open" (or no policy)     → no restrictions
+ * - outbound "blocked", no allowlist   → blockNetwork: true (drops all egress)
+ * - outbound "blocked" with allowlist  → outboundDomainAllowlist (hostnames,
+ *   wildcards like "*.example.com") + outboundCidrAllowlist (IPs/CIDRs; bare
+ *   IPs get /32 or /128 appended). Both lists are always set because Modal
+ *   treats an unset list as "allow all" — an empty array means "allow none"
+ *   for that class of destination. Note: Modal's domain allowlist only admits
+ *   TLS traffic on port 443; plaintext destinations must be listed as CIDRs.
+ */
+declare function mapNetworkPolicy(network?: SandboxCreateOptions["network"]): ModalNetworkCreateParams;
+/** Container registry family for an image tag. */
+type ImageRegistry = "aws-ecr" | "gcp-artifact-registry" | "registry";
+/** Detect which Modal image constructor an image tag needs. */
+declare function resolveImageRegistry(tag: string): ImageRegistry;
+/**
+ * Build a SandboxInfo from a sandbox's tags. Modal exposes no metadata or
+ * public timestamps, so image and startedAt come from the tags stamped at
+ * create time; for sandboxes not created by this SDK they are empty strings
+ * (never fabricated). endAt is always undefined — Modal does not expose it.
+ */
+declare function buildSandboxInfo(sandboxId: string, tags: Record<string, string>, fallbackImage?: string): SandboxInfo;
 /** Result of a completed sandbox command */
 interface SandboxCommandResult {
     exitCode: number;
@@ -93,15 +235,83 @@ interface SandboxCreateOptions {
     image?: string;
     envs?: Record<string, string>;
     metadata?: Record<string, string>;
+    /** Sandbox lifetime in ms. Modal hard-caps lifetime at 24h (MODAL_MAX_LIFETIME_MS). */
     timeoutMs?: number;
+    /**
+     * Terminate the sandbox after this long with nothing running in it — the
+     * bound that reclaims a box whose client died, without waiting out the whole
+     * lifetime. Modal is the only provider with both clocks.
+     *
+     * OMITTED BY DEFAULT: Modal runs no idle timer unless asked. Modal counts a
+     * sandbox active while an exec is running, while its stdin is being written,
+     * or while a tunnel connection is open — file operations are not named in
+     * that list, and this adapter is safe only because it routes reads and writes
+     * through exec (`cat` / `cat >`). A future native filesystem path would need
+     * this re-checked.
+     */
+    idleTimeoutMs?: number;
     workingDirectory?: string;
+    /**
+     * Per-sandbox compute sizing: cpu in cores, memory in GiB — mapped to
+     * Modal's create-time cpu / memoryMiB requests (defaults when omitted:
+     * 4 cores / 4 GiB). `disk` is REJECTED with ModalResourcesError: the Modal
+     * JS SDK exposes no disk-size parameter, so a specific disk size cannot be
+     * enforced (containers get Modal's default disk quota).
+     */
+    resources?: {
+        cpu?: number;
+        memory?: number;
+        disk?: number;
+    };
+    /**
+     * Provider-neutral outbound network policy, enforced by Modal's network
+     * stack. "blocked" with no allowedDestinations drops all egress; with
+     * allowedDestinations, hostnames go to Modal's domain allowlist (TLS/443
+     * only) and IPs/CIDRs to the CIDR allowlist.
+     */
+    network?: {
+        outbound: "open" | "blocked";
+        allowedDestinations?: string[];
+    };
+    /**
+     * Run all commands and file operations as this user (default "user"),
+     * enforced via an `su <user> -c` wrapper since Modal executes everything as
+     * root. Pass "root" to run directly as root with no wrapper.
+     */
+    user?: string;
+    /** Home directory used by the SDK for agent config paths; not consumed by the provider. */
+    homeDir?: string;
 }
 /** Options for listing sandboxes */
 interface SandboxListOptions {
+    /** Modal has no paused state; filters that exclude "running" match nothing. */
     state?: ("running" | "paused")[];
     metadata?: Record<string, string>;
     limit?: number;
 }
+/**
+ * A COMPLETE (or admittedly incomplete) enumeration of the app's fleet.
+ *
+ * `complete` is the load-bearing field. Callers that need a whole fleet —
+ * orphan sweeps, lifecycle reconciliation — read a sandbox's ABSENCE from the
+ * list as evidence it is gone, so a truncated walk and a small fleet must never
+ * be the same answer. That includes a walk stopped by the caller's own `limit`:
+ * "you asked for ten and there are more" is a truncated fleet.
+ */
+interface SandboxListPage {
+    sandboxes: SandboxInfo[];
+    complete: boolean;
+    pagesFetched: number;
+    error?: string;
+}
+/**
+ * Sandboxes a single enumeration will walk before it gives up and reports
+ * itself incomplete. Modal's list is an async generator with no page size we
+ * control, so the ceiling is counted in SANDBOXES rather than pages — same
+ * purpose as the other providers' page caps: never return a short list that
+ * reads like a whole one.
+ */
+declare const MODAL_MAX_LIST_SANDBOXES = 10000;
 /** Command execution capabilities */
 interface SandboxCommands {
     /** Run command and wait for completion */
@@ -132,6 +342,8 @@ interface SandboxFiles {
     readStream(path: string): Promise<ReadableStream<Uint8Array>>;
     /** Write from stream */
     writeStream(path: string, stream: ReadableStream<Uint8Array>): Promise<void>;
+    /** Upload a local file by path, streamed off disk (never buffered whole) */
+    writeFromPath(sandboxPath: string, localPath: string): Promise<void>;
     /** Get pre-signed upload URL for large files (expiration in seconds) */
     uploadUrl(path: string, expiresInSeconds?: number): Promise<string>;
     /** Get pre-signed download URL for large files (expiration in seconds) */
@@ -169,12 +381,17 @@ interface SandboxInstance {
 interface SandboxProvider {
     /** Provider type identifier */
     readonly providerType: string;
+    /** Human-readable provider name for logging */
+    readonly name?: string;
     /** Create new sandbox */
     create(options: SandboxCreateOptions): Promise<SandboxInstance>;
     /** Connect to existing sandbox */
     connect(sandboxId: string, timeoutMs?: number): Promise<SandboxInstance>;
     /** List sandboxes (first page only, up to limit) */
+    /** List sandboxes, walking the whole app. `limit` bounds items returned. */
     list(options?: SandboxListOptions): Promise<SandboxInfo[]>;
+    /** The same enumeration for fleet bookkeeping: never throws, reports completeness. */
+    listAll(options?: SandboxListOptions): Promise<SandboxListPage>;
 }
 interface ModalConfig {
     /** Modal app name. Default: "evolve-sandbox" */
@@ -189,6 +406,13 @@ interface ModalConfig {
     endpoint?: string;
     /** Docker image name (default: 'evolve-all'). Resolved through IMAGE_MAP or used as-is for custom images. */
     imageName?: string;
+    /**
+     * Name of a Modal Secret holding registry credentials for private images.
+     * Required for AWS ECR (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,
+     * AWS_REGION with read-only ECR IAM) and GCP Artifact Registry; optional
+     * for private Docker Hub images. Create one at https://modal.com/secrets
+     */
+    imageSecretName?: string;
 }
 /** Internal resolved config with required credentials */
 interface ResolvedModalConfig {
@@ -198,6 +422,64 @@ interface ResolvedModalConfig {
     defaultTimeoutMs?: number;
     endpoint?: string;
     imageName?: string;
+    imageSecretName?: string;
+}
+declare class ModalCommands implements SandboxCommands {
+    private sandbox;
+    private user;
+    constructor(sandbox: Sandbox, user: string);
+    run(command: string, options?: SandboxRunOptions): Promise<SandboxCommandResult>;
+    spawn(command: string, options?: SandboxSpawnOptions): Promise<SandboxCommandHandle>;
+    list(): Promise<ProcessInfo[]>;
+    connect(_processId: string, _options?: SandboxConnectOptions): Promise<SandboxCommandHandle>;
+    sendStdin(_processId: string, _data: string): Promise<void>;
+    kill(processId: string): Promise<boolean>;
+    /**
+     * Accumulate stdout/stderr using for-await pattern (more reliable with Modal streams).
+     * Based on vibekit's approach which works correctly with Modal SDK.
+     */
+    private accumulateStreams;
+}
+declare class ModalFiles implements SandboxFiles {
+    private sandbox;
+    private user;
+    constructor(sandbox: Sandbox, user: string);
+    /**
+     * Chown a path to the sandbox user so agent CLIs (running via the su
+     * wrapper) can access files created by root-level exec. No-op when the
+     * sandbox user is root.
+     */
+    private chownToUser;
+    /**
+     * Write a payload to a process's stdin in MODAL_STDIN_CHUNK_BYTES slices.
+     * Each writeBytes() call becomes one gRPC TaskExecStdinWrite message and
+     * Modal rejects messages over 100MiB, so large files must be chunked
+     * (multi-hundred-MB payloads are common).
+     */
+    private writeStdinChunked;
+    read(path: string): Promise<string | Uint8Array>;
+    write(path: string, content: string | Buffer | ArrayBuffer | Uint8Array): Promise<void>;
+    writeBatch(files: Array<{
+        path: string;
+        data: string | Buffer | ArrayBuffer | Uint8Array;
+    }>): Promise<void>;
+    makeDir(path: string): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    list(path: string): Promise<FileInfo[]>;
+    remove(path: string): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    readStream(path: string): Promise<ReadableStream<Uint8Array>>;
+    writeStream(path: string, stream: ReadableStream<Uint8Array>): Promise<void>;
+    /**
+     * Upload a local file by PATH, chunk by chunk into the same `cat >` sink
+     * writeStream() uses — so peak memory is one chunk rather than the whole
+     * file, which is what makes a large artifact safe under concurrency.
+     */
+    writeFromPath(sandboxPath: string, localPath: string): Promise<void>;
+    uploadUrl(_path: string, _expiresInSeconds?: number): Promise<string>;
+    downloadUrl(_path: string, _expiresInSeconds?: number): Promise<string>;
+    watchDir(_path: string, _onEvent: (event: FilesystemEvent) => void | Promise<void>, _options?: WatchOptions): Promise<WatchHandle>;
+    private toBuffer;
 }
 declare class ModalProvider implements SandboxProvider {
     readonly providerType: "modal";
@@ -206,13 +488,103 @@ declare class ModalProvider implements SandboxProvider {
     private readonly appName;
     private readonly defaultTimeoutMs;
     private readonly imageName;
+    private readonly imageSecretName?;
     private _app;
+    /**
+     * Sandbox user configured at create time, reapplied on connect() so the su
+     * wrapper keeps targeting the same account. In-memory only: a connect()
+     * from a fresh process falls back to the default "user" account — callers
+     * reconnecting across processes must recreate the provider and sandbox with
+     * the same user, or operations on user-owned files fail loudly.
+     */
+    private readonly sandboxUsers;
     constructor(config: ResolvedModalConfig);
     private getApp;
+    /**
+     * Build a Modal Image for the resolved tag, routing private registries
+     * (AWS ECR, GCP Artifact Registry) through the configured Modal Secret.
+     */
+    private resolveImage;
     create(options: SandboxCreateOptions): Promise<SandboxInstance>;
     connect(sandboxId: string, _timeoutMs?: number): Promise<SandboxInstance>;
-    list(_options?: SandboxListOptions): Promise<SandboxInfo[]>;
+    /**
+     * List sandboxes, walking the whole app.
+     *
+     * This used to stop at a hardcoded default of 100 regardless of fleet size,
+     * which silently truncated any app with more — and said nothing about it
+     * while the shared SandboxProvider interface promised exhaustive listing.
+     * `limit` still bounds the sandboxes RETURNED, so a caller wanting one cheap
+     * sample asks for one; without it the answer is the whole app.
+     *
+     * The O(N)-round-trips warning below is unchanged and is the reason `limit`
+     * matters here more than on the other providers.
+     */
+    list(options?: SandboxListOptions): Promise<SandboxInfo[]>;
+    /**
+     * The fleet-bookkeeping enumeration: same walk, never throws.
+     *
+     * Modal has no lifecycle webhooks, so absence from a list is the ONLY
+     * termination signal either lane gets — which makes the difference between
+     * "the app is empty" and "the enumeration stopped early" the difference
+     * between a quiet fleet and one about to be reclaimed.
+     *
+     * NOTE the divergence from `listSandboxIds` below, which returns an EMPTY set
+     * on failure on the grounds that partial results are worse than none for a
+     * terminal-state decision. This one returns what it saw alongside
+     * `complete: false`. Both are safe because `complete` is what callers branch
+     * on, and the shared type documents the choice; do not align one to the other
+     * without deciding which rule you want.
+     */
+    listAll(options?: SandboxListOptions): Promise<SandboxListPage>;
+    private walk;
+    /**
+     * Live sandbox ids for the whole app, in ONE streamed call and O(1) round
+     * trips — the fleet-bookkeeping counterpart to `list()`.
+     *
+     * Exists because `list()` cannot be made cheap without dropping metadata from
+     * its contract: it owes callers a populated `SandboxInfo.metadata`, and Modal
+     * only serves tags per sandbox. Anything that just needs "which ids are
+     * alive" — lifecycle polling, orphan sweeps, reconciliation — uses this and
+     * pays one request no matter how large the fleet is.
+     *
+     * `complete` is the load-bearing field, not a nicety: absence from this list
+     * is what callers read as "terminated", so a truncated or errored enumeration
+     * MUST NOT be mistaken for an empty fleet. A caller that sees complete=false
+     * has to leave rows alone rather than mass-marking live sandboxes dead.
+     */
+    listSandboxIds(): Promise<{
+        ids: Set<string>;
+        complete: boolean;
+    }>;
+}
+/** The streamed sandbox surface this walk needs — Modal's list() satisfies it. */
+interface ModalSandboxStream {
+    sandboxId: string;
+    getTags(): Promise<Record<string, string>>;
 }
+/**
+ * Drain Modal's sandbox generator into one answer, with an honest completeness
+ * verdict.
+ *
+ * Separate from the provider because everything worth getting wrong lives here
+ * and none of it needs a gRPC connection: the difference between "the caller
+ * asked for ten" and "the app ran out", the ceiling that stops an unbounded
+ * walk, and the rule that a failure mid-walk yields what it saw marked
+ * INCOMPLETE rather than an exception or a short complete list.
+ *
+ * COST WARNING — this loop is O(N) ROUND TRIPS, not O(1). `list()` itself is one
+ * streamed call, but `getTags()` is a separate gRPC request per sandbox
+ * (`sandboxTagsGet`), so listing N sandboxes costs N+1 calls. That is fine for a
+ * user listing their handful of boxes with metadata, and NOT fine for fleet-wide
+ * bookkeeping: anything that only needs to know WHICH ids are alive must use
+ * `listSandboxIds`, never this. Please do not "optimize" by reintroducing tag
+ * reads into those paths.
+ *
+ * Exported for its test (`_testCollectSandboxes`).
+ */
+declare function collectSandboxes(iterate: () => AsyncIterable<ModalSandboxStream>, wanted?: number): Promise<SandboxListPage & {
+    stoppedAtLimit: boolean;
+}>;
 /**
  * Create Modal sandbox provider.
  *
@@ -222,5 +594,13 @@ declare class ModalProvider implements SandboxProvider {
  * @see https://github.com/evolving-machines-lab/evolve/issues/8
  */
 declare function createModalProvider(config?: ModalConfig): SandboxProvider;
+declare const _testWrapCommand: typeof wrapCommand;
+declare const _testMapNetworkPolicy: typeof mapNetworkPolicy;
+declare const _testMapResources: typeof mapResources;
+declare const _testResolveImageRegistry: typeof resolveImageRegistry;
+declare const _testBuildSandboxInfo: typeof buildSandboxInfo;
+declare const _testCollectSandboxes: typeof collectSandboxes;
+declare const _testValidateTimeout: typeof validateTimeout;
+declare const _testMapIdleTimeout: typeof mapIdleTimeout;
 
-export { type FileInfo, type FilesystemEvent, type ModalConfig, ModalProvider, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxConnectOptions, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxProvider, type SandboxRunOptions, type SandboxSpawnOptions, type WatchHandle, type WatchOptions, createModalProvider };
+export { type FileInfo, type FilesystemEvent, MODAL_MAX_LIFETIME_MS, MODAL_MAX_LIST_SANDBOXES, MODAL_STDIN_CHUNK_BYTES, ModalCommands, type ModalConfig, ModalFiles, ModalIdleTimeoutError, ModalNetworkPolicyError, type ModalNetworkPolicyReason, ModalProvider, ModalResourcesError, ModalSandboxLifetimeError, type ModalSandboxStream, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxConnectOptions, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxListPage, type SandboxProvider, type SandboxRunOptions, type SandboxSpawnOptions, type WatchHandle, type WatchOptions, _testBuildSandboxInfo, _testCollectSandboxes, _testMapIdleTimeout, _testMapNetworkPolicy, _testMapResources, _testResolveImageRegistry, _testValidateTimeout, _testWrapCommand, createModalProvider };

package/dist/index.js

@@ -1,4 +1,4 @@
-import {ModalClient}from'modal';import {pack}from'tar-stream';var b={"evolve-all":"evolvingmachines/evolve-all"},h=new Set([".xlsx",".xls",".docx",".doc",".pptx",".ppt",".pdf",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".webp",".ico",".bmp",".mp3",".wav",".ogg",".flac",".aac",".mp4",".avi",".mov",".mkv",".webm",".woff",".woff2",".ttf",".otf",".eot",".exe",".dll",".so",".dylib",".sqlite",".db",".pickle",".pkl",".parquet"]);function y(c){let t=c.substring(c.lastIndexOf(".")).toLowerCase();return h.has(t)}var u=class{constructor(t){this.sandbox=t;}wrapAsUser(t,e,n){let r="";n&&Object.keys(n).length>0&&(r=Object.entries(n).filter(([,o])=>o!=null).map(([o,i])=>`export ${o}='${String(i).replace(/'/g,"'\\''")}'`).join("; ")+"; ");let s=e?`cd '${e.replace(/'/g,"'\\''")}' && ${r}${t}`:`${r}${t}`;return ["su","user","-c",`echo ${Buffer.from(s).toString("base64")} | base64 -d | bash`]}async run(t,e){let n=this.wrapAsUser(t,e?.cwd,e?.envs),r=await this.sandbox.exec(n,{timeoutMs:e?.timeoutMs}),{stdout:s,stderr:a}=await this.accumulateStreams(r,e?.onStdout,e?.onStderr);return {exitCode:await r.wait(),stdout:s,stderr:a}}async spawn(t,e){let n=this.wrapAsUser(t,e?.cwd,e?.envs),r=await this.sandbox.exec(n,{timeoutMs:e?.timeoutMs}),s="",a="",o=this.accumulateStreams(r,e?.onStdout?d=>{e.onStdout(d);}:void 0,e?.onStderr?d=>{e.onStderr(d);}:void 0).then(({stdout:d,stderr:m})=>{s=d,a=m;}).catch(()=>{});return {processId:`modal-${Date.now()}-${Math.random().toString(36).slice(2)}`,wait:async()=>(await o,{exitCode:await r.wait(),stdout:s,stderr:a}),kill:async()=>false}}async list(){let t=await this.sandbox.exec(["ps","-eo","pid,comm,args"],{timeoutMs:1e4});return await t.wait(),(await t.stdout.readText()).trim().split(`
-`).slice(1).map(r=>{let s=r.trim().split(/\s+/);return {processId:s[0],cmd:s[1]||"",args:s.slice(2),envs:{}}})}async connect(t,e){throw new Error("Modal does not support connecting to existing processes")}async sendStdin(t,e){throw new Error("Modal does not support sendStdin by process ID")}async kill(t){return await(await this.sandbox.exec(["kill","-9",t],{timeoutMs:1e4})).wait()===0}async accumulateStreams(t,e,n){let r="",s="",a=[];return a.push((async()=>{try{for await(let o of t.stdout){let i=typeof o=="string"?o:new TextDecoder().decode(o);r+=i,e?.(i);}}catch{}})()),a.push((async()=>{try{for await(let o of t.stderr){let i=typeof o=="string"?o:new TextDecoder().decode(o);s+=i,n?.(i);}}catch{}})()),await Promise.all(a),{stdout:r,stderr:s}}},g=class{constructor(t){this.sandbox=t;}async read(t){if(y(t)){let r=await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"}),s=await r.wait();if(s!==0){let a=await r.stderr.readText();throw new Error(`Failed to read file ${t}: ${a||`exit code ${s}`}`)}return await r.stdout.readBytes()}let e=await this.sandbox.exec(["cat",t],{timeoutMs:3e5}),n=await e.wait();if(n!==0){let r=await e.stderr.readText();throw new Error(`Failed to read file ${t}: ${r||`exit code ${n}`}`)}return await e.stdout.readText()}async write(t,e){let n=this.toBuffer(e),r=t.substring(0,t.lastIndexOf("/"));r&&await this.makeDir(r);let s=t.replace(/'/g,"'\\''"),a=await this.sandbox.exec(["bash","-c",`cat > '${s}'`],{mode:"binary"});await a.stdin.writeBytes(new Uint8Array(n)),await a.stdin.getWriter().close(),await a.wait(),await(await this.sandbox.exec(["chown","user:user",t],{timeoutMs:1e4})).wait();}async writeBatch(t){let e=pack(),n=[],r=new Set;for(let i of t){let d=this.toBuffer(i.data),m=i.path.startsWith("/")?i.path.slice(1):i.path;e.entry({name:m},d);let p=i.path.substring(0,i.path.lastIndexOf("/"));p&&r.add(p);}e.finalize();for await(let i of e)n.push(Buffer.from(i));let s=Buffer.concat(n),a=await this.sandbox.exec(["tar","-xf","-","-C","/"],{mode:"binary"});if(await a.stdin.writeBytes(new Uint8Array(s)),await a.stdin.getWriter().close(),await a.wait(),r.size>0){let i=Array.from(r),d=new Set(i.map(m=>m.split("/").slice(0,4).join("/")));for(let m of d)await(await this.sandbox.exec(["chown","-R","user:user",m],{timeoutMs:3e4})).wait();}}async makeDir(t){await(await this.sandbox.exec(["mkdir","-p",t],{timeoutMs:1e4})).wait(),await(await this.sandbox.exec(["chown","-R","user:user",t],{timeoutMs:1e4})).wait();}async exists(t){return await(await this.sandbox.exec(["test","-e",t],{timeoutMs:1e4})).wait()===0}async list(t){let e=t.replace(/'/g,"'\\''"),n=await this.sandbox.exec(["bash","-c",`ls -la '${e}' | tail -n +2`],{timeoutMs:3e4});await n.wait();let r=await n.stdout.readText(),s=[];for(let a of r.trim().split(`
-`)){if(!a)continue;let o=a.split(/\s+/);if(o.length<9)continue;let i=o[0],d=o.slice(8).join(" ");d==="."||d===".."||s.push({name:d,path:t.endsWith("/")?`${t}${d}`:`${t}/${d}`,type:i.startsWith("d")?"dir":"file"});}return s}async remove(t){await(await this.sandbox.exec(["rm","-rf",t],{timeoutMs:3e4})).wait();}async rename(t,e){await(await this.sandbox.exec(["mv",t,e],{timeoutMs:3e4})).wait();}async readStream(t){return (await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"})).stdout}async writeStream(t,e){let n=t.substring(0,t.lastIndexOf("/"));n&&await this.makeDir(n);let r=t.replace(/'/g,"'\\''"),s=await this.sandbox.exec(["bash","-c",`cat > '${r}'`],{mode:"binary"}),a=e.getReader();try{for(;;){let{done:i,value:d}=await a.read();if(i)break;await s.stdin.writeBytes(d);}}finally{a.releaseLock();}await s.stdin.getWriter().close(),await s.wait();}async uploadUrl(t,e){throw new Error("Modal does not support pre-signed upload URLs")}async downloadUrl(t,e){throw new Error("Modal does not support pre-signed download URLs")}async watchDir(t,e,n){throw new Error("Modal does not support watchDir")}toBuffer(t){if(typeof t=="string")return Buffer.from(t,"utf-8");if(t instanceof Buffer)return t;if(t instanceof ArrayBuffer||t instanceof Uint8Array)return Buffer.from(t);throw new Error(`Unsupported data type: ${typeof t}`)}},l=class{constructor(t,e){this.sandbox=t;this.commands=new u(t),this.files=new g(t),this.image=e,this.startTime=new Date;}commands;files;image;startTime;get sandboxId(){return this.sandbox.sandboxId}async getHost(t){let n=(await this.sandbox.tunnels())[t];if(!n)throw new Error(`No tunnel found for port ${t}`);return n.url}async isRunning(){try{return await(await this.sandbox.exec(["echo","ping"],{timeoutMs:5e3})).wait(),!0}catch{return  false}}async getInfo(){return {sandboxId:this.sandbox.sandboxId,image:this.image,metadata:{},startedAt:this.startTime.toISOString()}}async kill(){try{await this.sandbox.terminate();}catch{await new Promise(t=>setTimeout(t,500)),await this.sandbox.terminate();}}async pause(){throw new Error("Modal does not support pause. Use kill() instead.")}},w=class{providerType="modal";name="Modal";client;appName;defaultTimeoutMs;imageName;_app;constructor(t){!t.endpoint&&process.env.MODAL_SERVER_URL?.startsWith("unix:")?process.env.MODAL_SERVER_URL="https://api.modal.com:443":t.endpoint&&(process.env.MODAL_SERVER_URL=t.endpoint),this.client=new ModalClient({tokenId:t.tokenId,tokenSecret:t.tokenSecret}),this.appName=t.appName??"evolve-sandbox",this.defaultTimeoutMs=t.defaultTimeoutMs??36e5,this.imageName=t.imageName??"evolve-all";}async getApp(){return this._app||(this._app=await this.client.apps.fromName(this.appName,{createIfMissing:true})),this._app}async create(t){let e=await this.getApp(),n=t.timeoutMs??this.defaultTimeoutMs,r=t.image||this.imageName,s=b[r]??r,o=await this.client.images.fromRegistry(s).build(e),i=t.envs?Object.fromEntries(Object.entries(t.envs).filter(([,p])=>p!=null)):void 0,d=i&&Object.keys(i).length>0?i:void 0,m=await this.client.sandboxes.create(e,o,{cpu:4,memoryMiB:4096,timeoutMs:n,workdir:t.workingDirectory,env:d});return t.workingDirectory&&await(await m.exec(["chown","-R","user:user",t.workingDirectory],{timeoutMs:3e4})).wait(),new l(m,s)}async connect(t,e){let n=await this.client.sandboxes.fromId(t);return new l(n,"unknown")}async list(t){let e=[],n=t?.limit??100;try{for await(let r of this.client.sandboxes.list())if(e.push({sandboxId:r.sandboxId,image:"unknown",metadata:{},startedAt:new Date().toISOString()}),e.length>=n)break}catch{}return e}};function k(c={}){let t=c.tokenId??process.env.MODAL_TOKEN_ID,e=c.tokenSecret??process.env.MODAL_TOKEN_SECRET;if(!t||!e)throw new Error("Modal credentials required. Set MODAL_TOKEN_ID and MODAL_TOKEN_SECRET environment variables, or pass tokenId/tokenSecret in config. Get your token at https://modal.com/settings/tokens");return new w({...c,tokenId:t,tokenSecret:e})}
-export{w as ModalProvider,k as createModalProvider};
+import {ModalClient}from'modal';import {pack}from'tar-stream';var H={"evolve-all":"evolvingmachines/evolve-all"},E=1440*60*1e3,A=8*1024*1024,k="user",R="evolve.image",_="evolve.startedAt",j=new Set([".xlsx",".xls",".docx",".doc",".pptx",".ppt",".pdf",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".webp",".ico",".bmp",".mp3",".wav",".ogg",".flac",".aac",".mp4",".avi",".mov",".mkv",".webm",".woff",".woff2",".ttf",".otf",".eot",".exe",".dll",".so",".dylib",".sqlite",".db",".pickle",".pkl",".parquet"]);function q(n){let t=n.substring(n.lastIndexOf(".")).toLowerCase();return j.has(t)}var x=class extends Error{requestedTimeoutMs;constructor(t){let e=(t/36e5).toFixed(1);super(`Modal sandboxes have a hard 24h lifetime cap; requested timeout was ${e}h. For sessions longer than 24h, persist progress with Evolve checkpoints and resume in a fresh sandbox instead of extending the timeout.`),this.name="ModalSandboxLifetimeError",this.requestedTimeoutMs=t;}};function C(n){if(n>E)throw new x(n)}var p=class extends Error{requestedIdleTimeoutMs;constructor(t,e){super(`Modal idleTimeoutMs of ${t}ms is invalid: ${e}`),this.name="ModalIdleTimeoutError",this.requestedIdleTimeoutMs=t;}};function O(n){if(n===void 0)return {};if(!Number.isFinite(n)||n<=0)throw new p(n,"it must be a positive number of milliseconds");if(n>E)throw new p(n,"it exceeds Modal's 24h lifetime cap, so the sandbox would always die of the lifetime first");return {idleTimeoutMs:n}}function b(n,t,e,r){let s="";r&&Object.keys(r).length>0&&(s=Object.entries(r).filter(([,d])=>d!=null).map(([d,a])=>`export ${d}='${String(a).replace(/'/g,"'\\''")}'`).join("; ")+"; ");let i=e?`cd '${e.replace(/'/g,"'\\''")}' && ${s}${n}`:`${s}${n}`;if(t==="root")return ["bash","-c",i];let o=Buffer.from(i).toString("base64");return ["su",t,"-c",`echo ${o} | base64 -d | bash`]}var S=class extends Error{constructor(t){super(t),this.name="ModalResourcesError";}},z=4,G=4096;function N(n){if(n?.disk!==void 0)throw new S(`Modal's JS SDK has no create-time disk-size parameter, so a ${n.disk} GiB disk request cannot be enforced. Drop \`resources.disk\` (containers get Modal's default disk quota) or run on a provider that sizes disk.`);return {cpu:n?.cpu??z,memoryMiB:n?.memory!==void 0?Math.ceil(n.memory*1024):G}}var u=class extends Error{reason;destination;constructor(t,e,r){super(e),this.name="ModalNetworkPolicyError",this.reason=t,this.destination=r;}};function D(n){let t=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})(?:\/(\d{1,3}))?$/.exec(n);return !(!t||[t[1],t[2],t[3],t[4]].some(e=>Number(e)>255)||t[5]!==void 0&&Number(t[5])>32)}function K(n){return /^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(n)&&!D(n)}function X(n){return n.startsWith("[")?true:(n.match(/:/g)?.length??0)>=2}function Y(n){return /^[^:]+:\d+$/.test(n)}function T(n){if(!n||n.outbound==="open"){if(n?.allowedDestinations?.length)throw new Error("network.allowedDestinations is only valid when outbound is blocked");return {}}let t=n.allowedDestinations??[];if(t.length===0)return {blockNetwork:true};let e=[],r=[];for(let s of t)if(D(s))e.push(s.includes("/")?s:`${s}/32`);else {if(K(s))throw new u("invalid-ipv4",`"${s}" is not a valid IPv4 address or CIDR (octets must be 0-255, prefix 0-32). Fix the address or list a hostname instead.`,s);if(X(s))e.push(s.includes("/")?s:`${s}/128`);else {if(Y(s))throw new u("port-unsupported",`Modal's network allowlist filters hosts and IPs only and cannot match a port; drop the ":<port>" from "${s}" and list just the host or IP.`,s);r.push(s);}}return {outboundCidrAllowlist:e,outboundDomainAllowlist:r}}function $(n){let t=n.split("/")[0];return /^\d{12}\.dkr\.ecr\.[a-z0-9-]+\.amazonaws\.com$/.test(t)?"aws-ecr":t==="gcr.io"||t.endsWith(".gcr.io")||t.endsWith("-docker.pkg.dev")?"gcp-artifact-registry":"registry"}function I(n,t,e){let{[R]:r,[_]:s,...i}=t;return {sandboxId:n,image:r??e??"",metadata:i,startedAt:s??""}}var M=1e4,y=class{constructor(t,e){this.sandbox=t;this.user=e;}async run(t,e){let r=b(t,this.user,e?.cwd,e?.envs),s=await this.sandbox.exec(r,{timeoutMs:e?.timeoutMs}),{stdout:i,stderr:o}=await this.accumulateStreams(s,e?.onStdout,e?.onStderr);return {exitCode:await s.wait(),stdout:i,stderr:o}}async spawn(t,e){let r=b(t,this.user,e?.cwd,e?.envs),s=await this.sandbox.exec(r,{timeoutMs:e?.timeoutMs}),i="",o="",d=this.accumulateStreams(s,e?.onStdout?c=>{e.onStdout(c);}:void 0,e?.onStderr?c=>{e.onStderr(c);}:void 0).then(({stdout:c,stderr:m})=>{i=c,o=m;}).catch(()=>{});return {processId:`modal-${Date.now()}-${Math.random().toString(36).slice(2)}`,wait:async()=>(await d,{exitCode:await s.wait(),stdout:i,stderr:o}),kill:async()=>false}}async list(){let t=await this.sandbox.exec(["ps","-eo","pid,comm,args"],{timeoutMs:1e4});return await t.wait(),(await t.stdout.readText()).trim().split(`
+`).slice(1).map(s=>{let i=s.trim().split(/\s+/);return {processId:i[0],cmd:i[1]||"",args:i.slice(2),envs:{}}})}async connect(t,e){throw new Error("Modal does not support connecting to existing processes")}async sendStdin(t,e){throw new Error("Modal does not support sendStdin by process ID")}async kill(t){return await(await this.sandbox.exec(["kill","-9",t],{timeoutMs:1e4})).wait()===0}async accumulateStreams(t,e,r){let s="",i="",o=[];return o.push((async()=>{try{for await(let d of t.stdout){let a=typeof d=="string"?d:new TextDecoder().decode(d);s+=a,e?.(a);}}catch{}})()),o.push((async()=>{try{for await(let d of t.stderr){let a=typeof d=="string"?d:new TextDecoder().decode(d);i+=a,r?.(a);}}catch{}})()),await Promise.all(o),{stdout:s,stderr:i}}},v=class{constructor(t,e){this.sandbox=t;this.user=e;}async chownToUser(t,e=false){if(this.user==="root")return;let r=e?["chown","-R",`${this.user}:${this.user}`,t]:["chown",`${this.user}:${this.user}`,t];await(await this.sandbox.exec(r,{timeoutMs:e?3e4:1e4})).wait();}async writeStdinChunked(t,e){for(let r=0;r<e.length;r+=A)await t.writeBytes(e.subarray(r,r+A));}async read(t){if(q(t)){let s=await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"}),i=await s.wait();if(i!==0){let o=await s.stderr.readText();throw new Error(`Failed to read file ${t}: ${o||`exit code ${i}`}`)}return await s.stdout.readBytes()}let e=await this.sandbox.exec(["cat",t],{timeoutMs:3e5}),r=await e.wait();if(r!==0){let s=await e.stderr.readText();throw new Error(`Failed to read file ${t}: ${s||`exit code ${r}`}`)}return await e.stdout.readText()}async write(t,e){let r=this.toBuffer(e),s=t.substring(0,t.lastIndexOf("/"));s&&await this.makeDir(s);let i=t.replace(/'/g,"'\\''"),o=await this.sandbox.exec(["bash","-c",`cat > '${i}'`],{mode:"binary"});await this.writeStdinChunked(o.stdin,new Uint8Array(r)),await o.stdin.getWriter().close(),await o.wait(),await this.chownToUser(t);}async writeBatch(t){let e=pack(),r=[],s=new Set;for(let a of t){let c=this.toBuffer(a.data),m=a.path.startsWith("/")?a.path.slice(1):a.path;e.entry({name:m},c);let l=a.path.substring(0,a.path.lastIndexOf("/"));l&&s.add(l);}e.finalize();for await(let a of e)r.push(Buffer.from(a));let i=Buffer.concat(r),o=await this.sandbox.exec(["tar","-xf","-","-C","/"],{mode:"binary"});if(await this.writeStdinChunked(o.stdin,new Uint8Array(i)),await o.stdin.getWriter().close(),await o.wait(),s.size>0){let a=Array.from(s),c=new Set(a.map(m=>m.split("/").slice(0,4).join("/")));for(let m of c)await this.chownToUser(m,true);}}async makeDir(t){await(await this.sandbox.exec(["mkdir","-p",t],{timeoutMs:1e4})).wait(),await this.chownToUser(t,true);}async exists(t){return await(await this.sandbox.exec(["test","-e",t],{timeoutMs:1e4})).wait()===0}async list(t){let e=t.replace(/'/g,"'\\''"),r=await this.sandbox.exec(["bash","-c",`ls -la '${e}' | tail -n +2`],{timeoutMs:3e4});await r.wait();let s=await r.stdout.readText(),i=[];for(let o of s.trim().split(`
+`)){if(!o)continue;let d=o.split(/\s+/);if(d.length<9)continue;let a=d[0],c=d.slice(8).join(" ");c==="."||c===".."||i.push({name:c,path:t.endsWith("/")?`${t}${c}`:`${t}/${c}`,type:a.startsWith("d")?"dir":"file"});}return i}async remove(t){await(await this.sandbox.exec(["rm","-rf",t],{timeoutMs:3e4})).wait();}async rename(t,e){await(await this.sandbox.exec(["mv",t,e],{timeoutMs:3e4})).wait();}async readStream(t){return (await this.sandbox.exec(["cat",t],{timeoutMs:3e5,mode:"binary"})).stdout}async writeStream(t,e){let r=t.substring(0,t.lastIndexOf("/"));r&&await this.makeDir(r);let s=t.replace(/'/g,"'\\''"),i=await this.sandbox.exec(["bash","-c",`cat > '${s}'`],{mode:"binary"}),o=e.getReader();try{for(;;){let{done:a,value:c}=await o.read();if(a)break;await this.writeStdinChunked(i.stdin,c);}}finally{o.releaseLock();}await i.stdin.getWriter().close(),await i.wait(),await this.chownToUser(t);}async writeFromPath(t,e){let{createReadStream:r}=await import('fs'),{Readable:s}=await import('stream'),i=s.toWeb(r(e));await this.writeStream(t,i);}async uploadUrl(t,e){throw new Error("Modal does not support pre-signed upload URLs")}async downloadUrl(t,e){throw new Error("Modal does not support pre-signed download URLs")}async watchDir(t,e,r){throw new Error("Modal does not support watchDir")}toBuffer(t){if(typeof t=="string")return Buffer.from(t,"utf-8");if(t instanceof Buffer)return t;if(t instanceof ArrayBuffer||t instanceof Uint8Array)return Buffer.from(t);throw new Error(`Unsupported data type: ${typeof t}`)}},g=class{constructor(t,e,r){this.sandbox=t;this.commands=new y(t,r),this.files=new v(t,r),this.image=e;}commands;files;image;get sandboxId(){return this.sandbox.sandboxId}async getHost(t){let r=(await this.sandbox.tunnels())[t];if(!r)throw new Error(`No tunnel found for port ${t}`);return r.url}async isRunning(){try{return await this.sandbox.poll()===null}catch{return  false}}async getInfo(){let t=await this.sandbox.getTags();return I(this.sandbox.sandboxId,t,this.image)}async kill(){try{await this.sandbox.terminate();}catch{await new Promise(t=>setTimeout(t,500)),await this.sandbox.terminate();}}async pause(){throw new Error("Modal does not support pause/resume. Persist progress with Evolve checkpoints and resume in a fresh sandbox, or use kill() to terminate.")}},P=class{providerType="modal";name="Modal";client;appName;defaultTimeoutMs;imageName;imageSecretName;_app;sandboxUsers=new Map;constructor(t){!t.endpoint&&process.env.MODAL_SERVER_URL?.startsWith("unix:")?process.env.MODAL_SERVER_URL="https://api.modal.com:443":t.endpoint&&(process.env.MODAL_SERVER_URL=t.endpoint),this.client=new ModalClient({tokenId:t.tokenId,tokenSecret:t.tokenSecret}),this.appName=t.appName??"evolve-sandbox",this.defaultTimeoutMs=t.defaultTimeoutMs??36e5,this.imageName=t.imageName??"evolve-all",this.imageSecretName=t.imageSecretName;}async getApp(){return this._app||(this._app=await this.client.apps.fromName(this.appName,{createIfMissing:true})),this._app}async resolveImage(t){let e=$(t);if(e==="registry"){let s=this.imageSecretName?await this.client.secrets.fromName(this.imageSecretName):void 0;return this.client.images.fromRegistry(t,s)}if(!this.imageSecretName)throw new Error(`Private registry image "${t}" requires config.imageSecretName \u2014 the name of a Modal Secret holding registry credentials (AWS ECR: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION with read-only ECR IAM). Create one at https://modal.com/secrets`);let r=await this.client.secrets.fromName(this.imageSecretName);return e==="aws-ecr"?this.client.images.fromAwsEcr(t,r):this.client.images.fromGcpArtifactRegistry(t,r)}async create(t){let e=t.timeoutMs??this.defaultTimeoutMs;C(e);let r=O(t.idleTimeoutMs),s=T(t.network),i=N(t.resources),o=t.user??k,d=await this.getApp(),a=t.image||this.imageName,c=H[a]??a,l=await(await this.resolveImage(c)).build(d),f=t.envs?Object.fromEntries(Object.entries(t.envs).filter(([,h])=>h!=null)):void 0,B=f&&Object.keys(f).length>0?f:void 0,U={...t.metadata,[R]:c,[_]:new Date().toISOString()},w=await this.client.sandboxes.create(d,l,{cpu:i.cpu,memoryMiB:i.memoryMiB,timeoutMs:e,...r,workdir:t.workingDirectory,env:B,tags:U,...s});return t.workingDirectory&&o!=="root"&&await(await w.exec(["chown","-R",`${o}:${o}`,t.workingDirectory],{timeoutMs:3e4})).wait(),this.sandboxUsers.set(w.sandboxId,o),new g(w,c,o)}async connect(t,e){let r=await this.client.sandboxes.fromId(t),s=this.sandboxUsers.get(t)??k;return new g(r,void 0,s)}async list(t){let e=await this.walk(t);if(e.error&&!e.stoppedAtLimit)throw new Error(e.error);return e.sandboxes}async listAll(t){let{stoppedAtLimit:e,...r}=await this.walk(t);return r}async walk(t){if(t?.state&&!t.state.includes("running"))return {sandboxes:[],complete:true,pagesFetched:0,stoppedAtLimit:false};let e;try{e=await this.getApp();}catch(r){return {sandboxes:[],complete:false,pagesFetched:0,stoppedAtLimit:false,error:`sandbox list failed: ${r instanceof Error?r.message:String(r)}`}}return L(()=>this.client.sandboxes.list({appId:e.appId,tags:t?.metadata}),t?.limit)}async listSandboxIds(){let t=new Set;try{let e=await this.getApp();for await(let r of this.client.sandboxes.list({appId:e.appId}))t.add(r.sandboxId);return {ids:t,complete:!0}}catch{return {ids:new Set,complete:false}}}};async function L(n,t){let e=[];try{for await(let r of n()){if(t!==void 0&&e.length>=t)return {sandboxes:e,complete:!1,pagesFetched:e.length,stoppedAtLimit:!0,error:`stopped at the requested limit of ${t} with more sandboxes available`};if(e.length>=M)return {sandboxes:e,complete:!1,pagesFetched:e.length,stoppedAtLimit:!1,error:`sandbox list exceeded ${M} sandboxes`};let s=await r.getTags();e.push(I(r.sandboxId,s));}}catch(r){return {sandboxes:e,complete:false,pagesFetched:e.length,stoppedAtLimit:false,error:`sandbox list failed: ${r instanceof Error?r.message:String(r)}`}}return {sandboxes:e,complete:true,pagesFetched:e.length,stoppedAtLimit:false}}function rt(n={}){let t=n.tokenId??process.env.MODAL_TOKEN_ID,e=n.tokenSecret??process.env.MODAL_TOKEN_SECRET;if(!t||!e)throw new Error("Modal credentials required. Set MODAL_TOKEN_ID and MODAL_TOKEN_SECRET environment variables, or pass tokenId/tokenSecret in config. Get your token at https://modal.com/settings/tokens");return new P({...n,tokenId:t,tokenSecret:e})}var st=b,nt=T,it=N,ot=$,at=I,dt=L,ct=C,mt=O;
+export{E as MODAL_MAX_LIFETIME_MS,M as MODAL_MAX_LIST_SANDBOXES,A as MODAL_STDIN_CHUNK_BYTES,y as ModalCommands,v as ModalFiles,p as ModalIdleTimeoutError,u as ModalNetworkPolicyError,P as ModalProvider,S as ModalResourcesError,x as ModalSandboxLifetimeError,at as _testBuildSandboxInfo,dt as _testCollectSandboxes,mt as _testMapIdleTimeout,nt as _testMapNetworkPolicy,it as _testMapResources,ot as _testResolveImageRegistry,ct as _testValidateTimeout,st as _testWrapCommand,rt as createModalProvider};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evolvingmachines/modal",
-  "version": "0.0.51",
+  "version": "0.0.52-project-sable.20260729.8632c49",
   "keywords": [
     "ai",
     "agents",
@@ -33,10 +33,11 @@
   "scripts": {
     "build": "tsup --minify",
     "dev": "tsup --watch",
-    "type-check": "tsc --noEmit"
+    "type-check": "tsc --noEmit",
+    "test:unit": "tsx tests/unit/modal-provider.test.ts && tsx tests/unit/modal-list-pagination.test.ts"
   },
   "dependencies": {
-    "modal": "^0.6.0",
+    "modal": "^0.9.0",
     "tar-stream": "^3.1.7"
   },
   "devDependencies": {